PT-2006-6925 · Microsoft · Windows 2000+1

H07 · Publicado 2006-12-05 · Atualizado 2019-04-30 · CVE-2006-6296

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 2000 SP4 Microsoft Windows XP versions prior to SP2

Description The issue is related to the RpcGetPrinterData function in the Print Spooler service, which allows remote attackers to cause a denial of service by consuming memory via an RPC request with a large offered value, specifying the output buffer size.

Recommendations For Microsoft Windows 2000, update to at least SP4 to resolve the issue. For Microsoft Windows XP, update to at least SP2 to resolve the issue. As a temporary workaround, consider restricting access to the Print Spooler service to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-6296

Produtos afetados

Windows 2000

Windows Xp

Referências · 10

• 🔥 http://securityfocus.com/bid/21401 · Exploit
• 🔥 https://exploit-db.com/exploits/2879 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6296 · Nota de Segurança
• http://eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116 · Nota
• http://vupen.com/english/advisories/2006/4827 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/914617 · Nota
• http://secunia.com/advisories/23196 · Aviso do Fabricante
• http://securitytracker.com/id?1017330 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30717 · Nota
• http://research.eeye.com/html/alerts/zeroday/20051116.html · Nota