CVE-2006-0143

CVE-2006-0143 is a memory corruption vulnerability in the Microsoft Windows Graphics Rendering Engine (GRE) affecting Windows 2000, 2003 Server, 98, 98SE, ME, and XP. Remote attackers can exploit this flaw by crafting malicious WMF files with inconsistent length arguments in ExtCreateRegion or ExtEscape function calls, leading to a denial of service (system crash). With a CVSS score of 7.5, this vulnerability is easily exploitable over a network with no authentication, potentially causing partial confidentiality, integrity, and availability impacts. While not on the KEV catalog or actively exploited, public exploit code exists on ExploitDB, and its high EPSS score suggests a significant probability of future exploitation, despite minimal community discussion or media coverage.