CVE-2006-6753

Published Dec 27, 2006

Last updated 6 years ago

Overview

Description: Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.1
Impact score: 4.9
Exploitability score: 5.1
Vector string: AV:A/AC:L/Au:S/C:P/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:windows_event_viewer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "03B7EB3D-6451-4084-A9E6-2D797CB94E38"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References