CVE-2006-4071: Low severity Microsoft Windows XP vulnerability
Published Aug 10, 2006
·Updated
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
Affected Software
5 affected components
Microsoft Windows XP=sp1
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=r2
Microsoft Windows XP=sp2
Microsoft Windows XP=gold
Event History
Aug 10, 2006
CVE Published
01:04 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4071?
CVE-2006-4071 is classified as a denial of service vulnerability.
2
How do I fix CVE-2006-4071?
To mitigate CVE-2006-4071, apply the latest security patches provided by Microsoft for affected Windows versions.
3
What versions of Windows are affected by CVE-2006-4071?
CVE-2006-4071 affects Microsoft Windows XP and Windows Server 2003, including specific service pack versions.
4
What type of attack can exploit CVE-2006-4071?
CVE-2006-4071 can be exploited through specially crafted WMF files that lead to application crashes.
5
Is CVE-2006-4071 exploitable remotely?
CVE-2006-4071 requires user interaction to exploit, making remote exploitation unlikely.