CVE-2006-0013
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 34.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 34.85% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2003 server · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/18857Patch, Vendor Advisory
- http://securitytracker.com/id?1015630Patch
- http://www.kb.cert.org/vuls/id/388900Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/16636Patch
- http://www.vupen.com/english/advisories/2006/0577
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24491
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716
- http://secunia.com/advisories/18857Patch, Vendor Advisory
- http://securitytracker.com/id?1015630Patch
- http://www.kb.cert.org/vuls/id/388900Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/16636Patch
- http://www.vupen.com/english/advisories/2006/0577
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24491
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.