CVE-2006-3439

Description

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

88.959

Associated Vulnerability

Vulnerability	OS Platform
ms06-040: vulnerability in server service could allow remote code execution for Windows 2000 (KB921883)	Windows
ms06-040: vulnerability in server service could allow remote code execution for Windows XP (KB921883)	Windows
ms06-040: vulnerability in server service could allow remote code execution for Windows Server 2003 (KB921883) x86 based systems	Windows
ms06-040: vulnerability in server service could allow remote code execution for Windows Server 2003 (KB921883) x86 based systems for SP1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234