medium6.6Public exploit code
CVE-2006-6797
The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (crash) or read arbitrary memory from csrss.e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - 'Csrss.exe/winsrv.dll' NtRaiseHardError Double-Free2006-12-31 · dos · windows · Verified
Impact
The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (crash) or read arbitrary memory from csrss.exe via crafted arguments to the NtRaiseHardError function with status 0x50000018, a different vulnerability than CVE-2006-6696.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23491
- http://securityreason.com/securityalert/2086
- http://securitytracker.com/id?1017454
- http://www.kb.cert.org/vuls/id/740636
- http://www.reversemode.com/index.php?option=com_content&task=view&id=29&Itemid=2
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=43
- http://www.securityfocus.com/archive/1/455365/100/0/threaded
- http://www.securityfocus.com/archive/1/466331/100/200/threaded
- http://www.us-cert.gov/cas/techalerts/TA07-100A.html
- http://www.vupen.com/english/advisories/2006/5197
- http://www.vupen.com/english/advisories/2007/1325
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31176
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2013
- http://secunia.com/advisories/23491
- http://securityreason.com/securityalert/2086
- http://securitytracker.com/id?1017454
- http://www.kb.cert.org/vuls/id/740636
- http://www.reversemode.com/index.php?option=com_content&task=view&id=29&Itemid=2
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=43
- http://www.securityfocus.com/archive/1/455365/100/0/threaded
- http://www.securityfocus.com/archive/1/466331/100/200/threaded
- http://www.us-cert.gov/cas/techalerts/TA07-100A.html
- http://www.vupen.com/english/advisories/2006/5197
- http://www.vupen.com/english/advisories/2007/1325