Privilege escalation in Microsoft Windows - CVE-2006-5758

Vulnerability details

The vulnerability allows a local attacker to obtain elevated privileges on vulnerable system.

The vulnerability exists in Graphics Rendering Engine when processing WMF and EMF files. A local user create a specially crafted WMF or EMF file and execute arbitrary code on vulnerable system with elevated privileges.

Successful exploitation of this vulnerability may allow a local user to obtain full access to vulnerable system.

Affected software

How to mitigate CVE-2006-5758

• Microsoft Windows 2000 Service Pack 4 — Download the update
• Microsoft Windows XP Service Pack 2 — Download the update
• Microsoft Windows XP Professional x64 Edition and Microsoft Windows XP Professional x64 Edition Service Pack 2 — Download the update

Links to Public Exploits and PoC-codes

• Exploit #577 - Microsoft Windows - '.ani' GDI Remote Elevation of Privilege Exploit (MS07-017) (March 18, 2020)
• Exploit #578 - Microsoft Windows - GDI Privilege Escalation (MS07-017) (2) (March 18, 2020)
• Exploit #579 - Microsoft Windows - GDI Privilege Escalation (MS07-017) (1) (March 18, 2020)

External References

• https://technet.microsoft.com/en-us/library/security/ms07-017.aspx

Related Security Bulletins

• Multiple privilege escalation vulnerabilities in Microsoft Windows