PT-2006-5476 · Microsoft · Packager.Exe+2

Andreas Sandblad · Published 2006-10-10 · Updated 2024-02-13 · CVE-2006-4692

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to XP SP3 and Server 2003 SP2

Description The issue allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" character in the filename of the Command Line property, followed by a valid file extension. This could cause the command before the slash to be executed. A remote code execution vulnerability exists due to the way file extensions are handled, potentially allowing an attacker to take complete control of an affected system if a user visits a specially crafted Web site. Significant user interaction is required to exploit this vulnerability.

Recommendations For Microsoft Windows XP SP1 and SP2, and Server 2003 SP1 and earlier, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting the use of the packager.exe until a patch is available. Avoid using the Command Line property with filenames containing a "/" character followed by a valid file extension in the Windows Object Packager until the issue is resolved.

Fix

RCE

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2006-4692

Affected Products

Windows

Windows Object Packager

Packager.Exe

References · 15

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4692 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-065 · Vendor Advisory
• http://vupen.com/english/advisories/2006/3984 · Vendor Advisory
• http://secunia.com/advisories/20717 · Vendor Advisory
• http://secunia.com/secunia_research/2006-54/advisory · Vendor Advisory
• http://securityfocus.com/archive/1/449179/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4692 · Security Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/MS06-065 · Note
• http://kb.cert.org/vuls/id/703936 · Note
• http://securityfocus.com/bid/20318 · Note
• http://securitytracker.com/id?1017037 · Note
• http://securityfocus.com/archive/1/448273/100/0/threaded · Note
• http://osvdb.org/29424 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A496 · Note
• http://securityfocus.com/archive/1/448696/100/0/threaded · Note