6.9

CVE-2006-6696

Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Updatesp1
Microsoft ≫ Windows 2000 Updatesp2
Microsoft ≫ Windows 2000 Updatesp3
Microsoft ≫ Windows 2000 Updatesp4
Microsoft ≫ Windows 2003 Server Versiondatacenter_edition
Microsoft ≫ Windows 2003 Server Versiondatacenter_edition Updatesp1
Microsoft ≫ Windows 2003 Server Versiondatacenter_edition Updatesp1_beta_1
Microsoft ≫ Windows 2003 Server Versionenterprise_edition Updatesp1
Microsoft ≫ Windows 2003 Server Versionenterprise_edition Updatesp1_beta_1
Microsoft ≫ Windows 2003 Server Versionsp1 Editionenterprise
Microsoft ≫ Windows 2003 Server Versionstandard
Microsoft ≫ Windows 2003 Server Versionstandard Updatesp1
Microsoft ≫ Windows 2003 Server Versionstandard Updatesp1_beta_1
Microsoft ≫ Windows 2003 Server Versionweb Updatesp1
Microsoft ≫ Windows 2003 Server Versionweb Updatesp1_beta_1
Microsoft ≫ Windows Vista Editiondecember_ctp
Microsoft ≫ Windows Vista Updatebeta
Microsoft ≫ Windows Vista Updatebeta1
Microsoft ≫ Windows Vista Updatebeta2
Microsoft ≫ Windows Xp Editionhome
Microsoft ≫ Windows Xp Editionmedia_center
Microsoft ≫ Windows Xp Updategold Editionprofessional
Microsoft ≫ Windows Xp Updatesp1 Editionhome
Microsoft ≫ Windows Xp Updatesp1 Editionmedia_center
Microsoft ≫ Windows Xp Updatesp2 Editionhome
Microsoft ≫ Windows Xp Updatesp2 Editionmedia_center
Microsoft ≫ Windows Xp Updatesp2 Editiontablet_pc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.48% 0.914
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.