CVE-2006-6797

{"id": "CVE-2006-6797", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-28T15:28:00.000", "references": [{"url": "http://secunia.com/advisories/23491", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2086", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017454", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/740636", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.reversemode.com/index.php?option=com_content&task=view&id=29&Itemid=2", "source": "cve@mitre.org"}, {"url": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=43", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/455365/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/466331/100/200/threaded", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-100A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/5197", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1325", "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31176", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2013", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (crash) or read arbitrary memory from csrss.exe via crafted arguments to the NtRaiseHardError function with status 0x50000018, a different vulnerability than CVE-2006-6696."}, {"lang": "es", "value": "El Subsistema de Cliente - Servidor en Tiempo de Ejecuci\u00f3n (Client Server Run-Time Subsystem o CSRSS) de Microsoft Windows permite a usuarios locales provocar una denegaci\u00f3n de servicio (ca\u00edda) o leer memoria de su elecci\u00f3n de csrss.exe mediante argumentos manipulados para la funci\u00f3n NtRaiseHardError con estatus 0x50000018, una vulnerabilidad distinta de CVE-2006-6696."}], "lastModified": "2018-10-17T21:49:39.397", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}