CVE-2006-6296

Опубликовано: 05 дек. 2006

Источник: nvd

CVSS2: 6.1

EPSS Средний

Описание

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.

Ссылки

http://research.eeye.com/html/alerts/zeroday/20051116.html
http://secunia.com/advisories/23196
Vendor Advisory
http://securitytracker.com/id?1017330
http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
http://www.kb.cert.org/vuls/id/914617
US Government Resource
http://www.securityfocus.com/bid/21401
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4827
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30717
https://www.exploit-db.com/exploits/2879
http://research.eeye.com/html/alerts/zeroday/20051116.html
http://secunia.com/advisories/23196
Vendor Advisory
http://securitytracker.com/id?1017330
http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
http://www.kb.cert.org/vuls/id/914617
US Government Resource
http://www.securityfocus.com/bid/21401
Exploit
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4827
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30717
https://www.exploit-db.com/exploits/2879

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*

EPSS

Процентиль: 97%

0.36523

Средний

6.1 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-4h9q-m672-24xx

github

почти 4 года назад