CVE-2006-2373
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 29.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 29.17% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- microsoft/windows 2000 · microsoft/windows server 2003 · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/20635Third Party Advisory
- http://securitytracker.com/id?1016288Third Party Advisory, VDB Entry
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=408Third Party Advisory
- http://www.osvdb.org/26440Broken Link
- http://www.securityfocus.com/bid/18356Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/2327Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26828Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007Third Party Advisory
- http://secunia.com/advisories/20635Third Party Advisory
- http://securitytracker.com/id?1016288Third Party Advisory, VDB Entry
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=408Third Party Advisory
- http://www.osvdb.org/26440Broken Link
- http://www.securityfocus.com/bid/18356Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/2327Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26828Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.