Vulnerability Details : CVE-2006-5758
Potential exploit
The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2006-5758
- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-5758
0.91%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-5758
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2006-5758
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2006-5758
-
http://kernelwars.blogspot.com/2007/01/alive.html
-
http://securitytracker.com/id?1017168
-
http://projects.info-pull.com/mokb/MOKB-06-11-2006.html
-
http://www.securityfocus.com/bid/20940
Exploit
-
http://secunia.com/advisories/22668
Vendor Advisory
-
http://www.vupen.com/english/advisories/2007/1215
Webmail: access your OVH emails on ovhcloud.com | OVHcloudVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/30042
-
http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
-
http://www.vupen.com/english/advisories/2006/4358
Vendor Advisory
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
Microsoft Security Bulletin MS07-017 - Critical | Microsoft Learn
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2056
-
http://www.securityfocus.com/archive/1/466186/100/200/threaded
Jump to