Description
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
References (12)
Core 12
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16636
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0577
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24491
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/388900
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015630
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18857
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716
Scores
EPSS
0.3485
EPSS Percentile
98.3%
Details
Status
published
Products (8)
microsoft/windows_2003_server
datacenter_64-bit sp1
microsoft/windows_2003_server
enterprise (2 CPE variants)
microsoft/windows_2003_server
enterprise_64-bit (2 CPE variants)
microsoft/windows_2003_server
r2 (3 CPE variants)
microsoft/windows_2003_server
standard (2 CPE variants)
microsoft/windows_2003_server
standard_64-bit
microsoft/windows_2003_server
web (2 CPE variants)
microsoft/windows_xp
(5 CPE variants)
Published
Feb 14, 2006
Tracked Since
Feb 18, 2026