CVE-2006-3440

2006-08-0901:04:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.803

Percentile

98.3%

JSON

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka “Winsock Hostname Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_2000sp4fr

microsoftwindows_2003_serverMatch64-bit

microsoftwindows_2003_serverMatchsp1

microsoftwindows_2003_serverMatchsp1itanium

microsoftwindows_xp64-bit

microsoftwindows_xpsp1tablet_pc

microsoftwindows_xpsp2tablet_pc

VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*
microsoftwindows_2003_server64-bitcpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::fr::::
microsoft	windows_2003_server	64-bit	cpe:2.3:o:microsoft:windows_2003_server:64-bit:::::::*
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1::itanium:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp1:tablet_pc:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::