CVE-2006-3445

15Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 40%

probabilidad de explotación

40%top 2% de las CVE

explotación observada

noninguna fuente lo reporta

Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.

Productos afectados

n/a · n/a

Referencias

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-068 http://secunia.com/advisories/22878 http://securitytracker.com/id?1017222 https://exchange.xforce.ibmcloud.com/vulnerabilities/29945 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A154 http://www.coseinc.com/alert.html http://www.kb.cert.org/vuls/id/810772 http://www.securityfocus.com/archive/1/458558/100/0/threaded http://www.securityfocus.com/bid/21034 http://www.us-cert.gov/cas/techalerts/TA06-318A.html http://www.vupen.com/english/advisories/2006/4506