PT-2006-1106 · Microsoft · Windows Server 2003+5

Fang Xing · Published 2006-01-10 · Updated 2019-04-30 · CVE-2006-0010

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 Microsoft Windows 98 Microsoft Windows ME

Description: A heap-based buffer overflow issue exists due to the way Windows handles malformed embedded Web fonts, specifically Embedded Open Type (EOT) web fonts. This could allow remote attackers to execute arbitrary code via an e-mail message or web page with a crafted EOT web font. An attacker who successfully exploits this issue could take complete control of an affected system.

Recommendations: For Microsoft Windows 2000, apply the necessary patch to update to at least SP4. For Microsoft Windows XP, apply the necessary patch to update to at least SP3. For Microsoft Windows Server 2003, apply the necessary patch to update to at least SP2. For Microsoft Windows 98 and ME, consider upgrading to a newer version of Windows, as these versions are no longer supported. As a temporary workaround, consider restricting access to embedded Web fonts until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-0010

Affected Products

Windows

Windows 2000

Windows 98

Windows Me

Windows Server 2003

Windows Xp

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2006-0010 · Security Note
• http://secunia.com/advisories/18365 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0010 · Security Note
• http://securityfocus.com/bid/16194 · Patch
• http://secunia.com/advisories/18311 · Vendor Advisory
• http://secunia.com/advisories/18391 · Vendor Advisory
• http://frsirt.com/english/advisories/2006/0118 · Note
• http://us-cert.gov/cas/techalerts/TA06-010A.html · Note
• http://securityfocus.com/archive/1/421885/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/0118 · Note
• http://eeye.com/html/Research/Advisories/EEYEB20050801.html · Note
• http://osvdb.org/18829 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm · Note
• http://securityfocus.com/archive/1/archive/1/421885/100/0/threaded · Note