CVE-2006-0010

Description

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Risk Information

Base Score

8.8

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

49.817

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows 2000 (KB908519)	Windows
Security Update for Windows XP (KB908519)	Windows
Security Update for Windows Server 2003 (KB908519) x86 based systems	Windows
Security Update for Windows Server 2003 (KB908519) x86 based systems for SP1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234