CVE-2006-0143: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 31.3% chance of exploitation in the next 30 days.

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version datacenter_64-bit only; version enterprise only; version enterprise_64-bit only; version r2 only; version standard only; version standard_64-bit only; …
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows XP: any version

Published 2006-01-09. Last modified 2026-06-16.