CVE-2006-6696: Buffer Overflow
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MBSERVICENOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6696?
CVE-2006-6696 is considered a critical vulnerability that allows local users to gain elevated privileges.
How do I fix CVE-2006-6696?
To mitigate CVE-2006-6696, it is recommended to apply the latest security updates from Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2006-6696?
CVE-2006-6696 affects Microsoft Windows 2000, XP, 2003, and Vista, specifically including various service pack versions.
What type of attack does CVE-2006-6696 facilitate?
CVE-2006-6696 facilitates privilege escalation attacks whereby an attacker can execute arbitrary code with elevated privileges.
Can CVE-2006-6696 be exploited remotely?
CVE-2006-6696 requires local access to exploit, meaning it cannot be exploited remotely.