CVE-2006-0020: Integer Overflow
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0020?
CVE-2006-0020 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2006-0020?
To fix CVE-2006-0020, apply the latest security patches provided by Microsoft for the affected operating systems.
What applications are affected by CVE-2006-0020?
CVE-2006-0020 affects Microsoft WMF parsing applications used in Internet Explorer on Windows 98SE, Windows 2000 SP4, Windows XP, and Windows 2003 Server.
What exploit does CVE-2006-0020 use to affect systems?
CVE-2006-0020 can be exploited through a specially crafted WMF file that leads to a system crash or arbitrary code execution.
Is CVE-2006-0020 still a risk for modern systems?
CVE-2006-0020 primarily affects outdated versions of Windows, making it less relevant for modern systems with current security updates.