peter bassill · operator
$ cve CVE-2006-4071 JSON

CVE-2006-4071 EXPLOIT

2.6
LOW · CVSS 2.0 · EPSS 24% (pctl 98)

Patch early

A public exploit exists.

Description

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.

Scoring

CVSS2.6 (LOW, v2.0)
VectorAV:N/AC:H/Au:N/C:N/I:N/A:P
EPSS24% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2006-08-10
Last modified2026-06-16

Affected (2)

VendorProduct
microsoftwindows 2003 server
microsoftwindows xp

Public exploits

SourceTitleDate
exploit-dbMicrosoft Windows Explorer - '.WMF' CreateBrushIndirect Denial of Service2007-01-13

References

→ the Explorer  ·  watch your stack  ·  NVD