The Graphics Rendering Engine in Microsoft Windows 2000 through 2000...
Vulnerability Description
The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5758
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.vupen.com/english/advisories/2007/1215
- http://kernelwars.blogspot.com/2007/01/alive.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2056
- http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
- http://www.vupen.com/english/advisories/2006/4358
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30042
- http://www.securityfocus.com/archive/1/466186/100/200/threaded
- http://projects.info-pull.com/mokb/MOKB-06-11-2006.html
- http://securitytracker.com/id?1017168
- http://www.securityfocus.com/bid/20940
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
- http://secunia.com/advisories/22668
- http://www.securityfocus.com/archive/1/466186/100/200/threaded
More from microsoft
View All →Affected Vendor
microsoft
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.