CVE-2006-5758
EXPLOITEDMicrosoft Windows 2000 through SP4 and XP through SP2 - Privilege Escalation via GDI Kernel Structure Memory Remapping
Title source: llmExploitation Summary
CVE-2006-5758 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits.
AI-analyzed exploit summary This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2006-5758) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
Description
The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
Exploits (3)
This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2006-5758) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
This exploit leverages a GDI local elevation of privilege vulnerability (CVE-2006-5758) by manipulating a palette object in the GDI shared section to execute arbitrary code in kernel mode. It hooks the GetNearestPaletteIndex function to achieve privilege escalation on unpatched Windows 2000/XP systems.
This exploit demonstrates a local privilege escalation (LPE) vulnerability in Windows GDI (CVE-2006-5758) by manipulating the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary kernel code execution. The PoC allocates memory at address 0x2, crafts a payload, and triggers the vulnerability via DeleteObject.