PT-2006-3340 · Microsoft · Windows 98+4
Published
2006-06-13
·
Updated
2021-07-23
·
CVE-2006-2378
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to XP SP3
Microsoft Windows XP SP1 and SP2
Microsoft Windows Server 2003 SP1 and earlier
Microsoft Windows 98 and Me
Description
The issue is related to a buffer overflow in the ART Image Rendering component, which allows remote attackers to execute arbitrary code via a crafted ART image. This could lead to heap corruption. An attacker could exploit this by constructing a specially crafted ART image, potentially allowing remote code execution if a user visits a malicious website or views a specially crafted email message. Successful exploitation could give an attacker complete control of the affected system.
Recommendations
For Microsoft Windows XP SP1 and SP2, consider applying security patches or updates to fix the buffer overflow issue in the ART Image Rendering component.
For Microsoft Windows Server 2003 SP1 and earlier, apply security patches or updates to address the remote code execution vulnerability.
For Microsoft Windows 98 and Me, restrict access to potentially malicious ART images to minimize the risk of exploitation.
As a temporary workaround, consider disabling the rendering of ART images in affected systems until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Windows
Windows 98
Windows Me
Windows Server 2003
Windows Xp