CVE-2006-3648

Microsoft Windows 2000 SP4, XP SP1-SP2, Server 2003 - Remote Code Execution via Exception Handling

Title source: llm

Description

Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."

References (7)

Core 7

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-051

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/3216

Patch, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/411516

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19384

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016661

Scores

EPSS 0.2355

EPSS Percentile 97.6%

Details

Status published

Products (4)

microsoft/windows_2000

microsoft/windows_2003_server r2

microsoft/windows_2003_server sp1

microsoft/windows_xp (2 CPE variants)

Published Aug 09, 2006

Tracked Since Feb 18, 2026