CVE-2006-3441
Microsoft Windows <2000 SP4 XP SP1-SP2 Server 2003 SP1 - RCE
Title source: llmDescription
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Winny Thomas · pythondoswindows
https://www.exploit-db.com/exploits/2900
References (15)
Scores
EPSS
0.7318
EPSS Percentile
98.8%
Details
Status
published
Products (4)
microsoft/windows_2000
microsoft/windows_2003_server
64-bit
microsoft/windows_2003_server
sp1 (2 CPE variants)
microsoft/windows_xp
(3 CPE variants)
Published
Aug 09, 2006
Tracked Since
Feb 18, 2026