PT-2006-4515 · Microsoft · Windows 2000+3

Ken Johnson + 1 · Published 2006-08-08 · Updated 2018-10-12 · CVE-2006-3648

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP1, XP SP2, Server 2003, Server 2003 SP1

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception." It is related to the way exception handling is managed on multiple applications that are resident in memory.

Recommendations For Microsoft Windows 2000 SP4, consider applying a patch or fix as soon as it becomes available to address the issue with exception handling. For Microsoft Windows XP SP1 and SP2, apply a patch or fix as soon as it becomes available to resolve the problem with unhandled exceptions in memory resident applications. For Microsoft Windows Server 2003 and 2003 SP1, apply a patch or fix as soon as it becomes available to fix the issue with exception handling in memory resident applications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3648

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3648 · Security Note
• http://us-cert.gov/cas/techalerts/TA06-220A.html · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3648 · Security Note
• http://kb.cert.org/vuls/id/411516 · Patch
• http://frsirt.com/english/advisories/2006/3216 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841 · Note
• http://securityfocus.com/bid/19384 · Note
• http://securitytracker.com/id?1016661 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:841 · Note
• http://vupen.com/english/advisories/2006/3216 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/MS06-051 · Note