PT-2006-6925 · Microsoft · Windows 2000+1

H07 · Published 2006-12-05 · Updated 2019-04-30 · CVE-2006-6296

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 2000 SP4 Microsoft Windows XP versions prior to SP2

Description The issue is related to the RpcGetPrinterData function in the Print Spooler service, which allows remote attackers to cause a denial of service by consuming memory via an RPC request with a large offered value, specifying the output buffer size.

Recommendations For Microsoft Windows 2000, update to at least SP4 to resolve the issue. For Microsoft Windows XP, update to at least SP2 to resolve the issue. As a temporary workaround, consider restricting access to the Print Spooler service to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-6296

Affected Products

Windows 2000

Windows Xp

References · 10

• 🔥 http://securityfocus.com/bid/21401 · Exploit
• 🔥 https://exploit-db.com/exploits/2879 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6296 · Security Note
• http://vupen.com/english/advisories/2006/4827 · Vendor Advisory
• http://secunia.com/advisories/23196 · Vendor Advisory
• http://eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116 · Note
• http://kb.cert.org/vuls/id/914617 · Note
• http://securitytracker.com/id?1017330 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30717 · Note
• http://research.eeye.com/html/alerts/zeroday/20051116.html · Note