PT-2006-4333 · Microsoft · Windows 2000+4

Published 2006-11-14 · Updated 2018-10-18 · CVE-2006-3445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Agent versions on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1

Description The issue arises from an integer overflow in the ReadWideString function within agentdpv.dll, allowing remote attackers to execute arbitrary code via a large length value in an .ACF file. This results in a heap-based buffer overflow. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution if a user views the page, and could take complete control of the affected system.

Recommendations For Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-3445

Affected Products

Agent

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 17

• http://secunia.com/advisories/22878 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-068 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3445 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-3445 · Security Note
• http://vupen.com/english/advisories/2006/4506 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A154 · Note
• http://xforce.iss.net/xforce/xfdb/29945 · Note
• http://coseinc.com/alert.html · Note
• http://kb.cert.org/vuls/id/810772 · Note
• http://securitytracker.com/id?1017222 · Note
• http://securityfocus.com/archive/1/458558/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA06-318A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-068 · Note
• http://securityfocus.com/archive/1/archive/1/458558/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29945 · Note