MicrosoftCVELIST:CVE-2006-3445CVE-2006-3445
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
References
secunia.com/advisories/22878
securitytracker.com/id?1017222
www.coseinc.com/alert.html
www.kb.cert.org/vuls/id/810772
www.securityfocus.com/archive/1/458558/100/0/threaded
www.securityfocus.com/bid/21034
www.us-cert.gov/cas/techalerts/TA06-318A.html
www.vupen.com/english/advisories/2006/4506
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-068
exchange.xforce.ibmcloud.com/vulnerabilities/29945
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A154
Related
