CVE-2006-0020
- State
- Published
- Severity
- Not scored
- Published
- Jan 10, 2006
- Updated
- Aug 7, 2024
- Reserved
- Nov 30, 2005
Description
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:1638vdb-entrysignature
- 22976vdb-entry
- 18912third-party-advisory
- [funsec] 20060110 Another WMF flaw without a Microsoft patchmailing-list
- 18729third-party-advisory
- http://www.microsoft.com/technet/security/advisory/913333.mspx
- VU#312956third-party-advisory
- ADV-2006-0469vdb-entry
- TA06-045Athird-party-advisory
- 16516vdb-entry
- MS06-004vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.