Integer Overflow Vulnerability in Graphics Rendering Engine of Microsoft Windows Products

CVE-2006-2376

Summary

The Graphics Rendering Engine in Microsoft Windows 98 and Me contains an integer overflow vulnerability within the PolyPolygon function. This flaw enables remote attackers to potentially execute arbitrary code by manipulating a specially crafted Windows Metafile (WMF) or Enhanced Metafile (EMF) image. The exploit involves a specific condition where the sum of the entries in the vertex counts array and the number of polygons leads to a heap-based buffer overflow, allowing unauthorized actions on the affected system.

References