CVE-2006-3441

Published Aug 9, 2006

Last updated 6 years ago

Overview

Description: Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
Source: secure@microsoft.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "330B6798-5380-44AD-9B52-DF5955FA832C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "644E2E89-F3E3-4383-B460-424D724EE62F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References