QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-6696

Back to search

CVE-2006-6696

Published: Dec 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.

VendorProductVersions

n/a

n/a

affected
n/a

References

HPSBST02208
vendor-advisory
x_refsource_HP
1017433
vdb-entry
x_refsource_SECTRACK
21688
vdb-entry
x_refsource_BID
MS07-021
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:1816
vdb-entry
signature
x_refsource_OVAL
ADV-2007-1325
vdb-entry
x_refsource_VUPEN
23324
vdb-entry
x_refsource_BID
23448
third-party-advisory
x_refsource_SECUNIA
SSRT071365
vendor-advisory
x_refsource_HP
ADV-2006-5120
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now