Lucene search

[email protected]CVE-2006-3351

HistoryJul 06, 2006 - 1:05 a.m.

CVE-2006-3351

2006-07-0601:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3351

buffer overflow

windows explorer

denial of service

arbitrary code

url file

internetshortcut

nvd

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

7.8 High

AI Score

Confidence

High

0.125 Low

EPSS

Percentile

95.5%

JSON

Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of “file:” specifiers.

Affected configurations

NVD

Node

microsoftwindows_2003_serverMatch3.1.0.3270

microsoftwindows_2003_serverMatch64-bit

microsoftwindows_2003_serverMatchdatacenter_64-bitsp1

microsoftwindows_2003_serverMatchdatacenter_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchdatacenter_edition

microsoftwindows_2003_serverMatchdatacenter_editionsp1

microsoftwindows_2003_serverMatchdatacenter_editionsp1_beta_1

microsoftwindows_2003_serverMatchdatacenter_edition_64-bit

microsoftwindows_2003_serverMatchdatacenter_edition_64-bitsp1

microsoftwindows_2003_serverMatchdatacenter_edition_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchenterprise64-bit

microsoftwindows_2003_serverMatchenterprisesp1

microsoftwindows_2003_serverMatchenterprisesp1_beta_1

microsoftwindows_2003_serverMatchenterprise_64-bit

microsoftwindows_2003_serverMatchenterprise_64-bitsp1

microsoftwindows_2003_serverMatchenterprise_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchenterprise_editionsp1

microsoftwindows_2003_serverMatchenterprise_editionsp1_beta_1

microsoftwindows_2003_serverMatchenterprise_edition_64-bit

microsoftwindows_2003_serverMatchenterprise_edition_64-bitsp1

microsoftwindows_2003_serverMatchenterprise_edition_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchitanium

microsoftwindows_2003_serverMatchr2

microsoftwindows_2003_serverMatchr264-bit

microsoftwindows_2003_serverMatchr2datacenter_64-bit

microsoftwindows_2003_serverMatchr2sp1

microsoftwindows_2003_serverMatchr2sp1_beta_1

microsoftwindows_2003_serverMatchsp1

microsoftwindows_2003_serverMatchsp1enterprise

microsoftwindows_2003_serverMatchsp1itanium

microsoftwindows_2003_serverMatchstandard

microsoftwindows_2003_serverMatchstandard64-bit

microsoftwindows_2003_serverMatchstandardsp1

microsoftwindows_2003_serverMatchstandardsp1_beta_1

microsoftwindows_2003_serverMatchstandard_64-bit

microsoftwindows_2003_serverMatchweb

microsoftwindows_2003_serverMatchwebsp1

microsoftwindows_2003_serverMatchwebsp1_beta_1

microsoftwindows_xp64-bit

microsoftwindows_xpembedded

microsoftwindows_xphome

microsoftwindows_xpmedia_center

microsoftwindows_xpgold

microsoftwindows_xpgoldhome

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp164-bit

microsoftwindows_xpsp1embedded

microsoftwindows_xpsp1home

microsoftwindows_xpsp1media_center

microsoftwindows_xpsp1tablet_pc

microsoftwindows_xpsp2home

microsoftwindows_xpsp2media_center

microsoftwindows_xpsp2tablet_pc

microsoftwindows_xpMatchibm_oem_version

microsoftwindows_xpMatchibm_oem_versionsp1

CPENameOperatorVersion
microsoft:windows_2003_servermicrosoft windows 2003 servereq3.1.0.3270
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_edition
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_edition
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqitanium

CPE	Name	Operator	Version
microsoft:windows_2003_server	microsoft windows 2003 server	eq	3.1.0.3270
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_edition
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_edition
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	itanium

Rows per page:

1-10 of 171

References

securityreason.com/securityalert/1186

www.securityfocus.com/archive/1/439153/100/0/threaded

www.securityfocus.com/archive/1/439660/100/200/threaded

www.securityfocus.com/bid/18838

exchange.xforce.ibmcloud.com/vulnerabilities/27567

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

7.8 High

AI Score

Confidence

High

0.125 Low

EPSS

Percentile

95.5%

JSON

Related for CVE-2006-3351

nvd1 checkpoint_advisories1 cvelist1