CVE-2006-5586

Published: Apr 4, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."

Affected (4)

Products: Microsoft: Windows 2000, Windows Xp

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (12)

http://www.securityfocus.com/archive/1/466186/100/200/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/23277

Source: secure@microsoft.com

http://www.securitytracker.com/id?1017846

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2007/1215

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1385

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/466186/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23277

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017846

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1215

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1385

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.