Unrated severityNVD Advisory· Published Jun 13, 2006· Updated Jun 16, 2026
CVE-2006-2376
CVE-2006-2376
Description
Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
- (no CPE)range: =98
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
- (no CPE)range: =Me
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/20631nvdPatchVendor Advisory
- www.vupen.com/english/advisories/2006/2324nvdVendor Advisory
- www.kb.cert.org/vuls/id/909508nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA06-164A.htmlnvdUS Government Resource
- securityreason.com/securityalert/1094nvd
- securitytracker.com/idnvd
- www.osvdb.org/26431nvd
- www.securityfocus.com/archive/1/436950/100/0/threadednvd
- www.securityfocus.com/bid/18322nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-026nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26815nvd
News mentions
0No linked articles in our index yet.