CVE-2006-0008

Опубликовано: 14 фев. 2006

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.

Ссылки

http://secunia.com/advisories/18859
Patch
Vendor Advisory
http://securitytracker.com/id?1015631
Patch
http://www.kb.cert.org/vuls/id/739844
Third Party Advisory
US Government Resource
http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html
Vendor Advisory
http://www.securityfocus.com/archive/1/425141/100/0/threaded
http://www.securityfocus.com/bid/16643
Patch
http://www.vupen.com/english/advisories/2006/0578
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-009
https://exchange.xforce.ibmcloud.com/vulnerabilities/24492
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1595
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1650
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1664
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1688
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A727
http://secunia.com/advisories/18859
Patch
Vendor Advisory
http://securitytracker.com/id?1015631
Patch
http://www.kb.cert.org/vuls/id/739844
Third Party Advisory
US Government Resource
http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html
Vendor Advisory
http://www.securityfocus.com/archive/1/425141/100/0/threaded
http://www.securityfocus.com/bid/16643
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

EPSS

Процентиль: 68%

0.0058

Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-wjg5-m2mm-fgxq

github

почти 4 года назад