CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-1314

Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.762

EPSS Ranking 98.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2006-1314

Microsoft » Windows 2000 » Version: N/A

cpe:2.3:o:microsoft:windows_2000:-
Microsoft » Windows 2003 Server » Version: 64-bit

cpe:2.3:o:microsoft:windows_2003_server:64-bit
Microsoft » Windows 2003 Server » Version: itanium

cpe:2.3:o:microsoft:windows_2003_server:itanium
Microsoft » Windows 2003 Server » Version: r2

cpe:2.3:o:microsoft:windows_2003_server:r2
Microsoft » Windows 2003 Server » Version: sp1

cpe:2.3:o:microsoft:windows_2003_server:sp1
Microsoft » Windows Xp » Version: Any

cpe:2.3:o:microsoft:windows_xp:*
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-1314

Products

Pricing

Contact Us