Vulnerability Details CVE-2006-3209
The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 45.8%
CVSS Severity
CVSS v2 Score 7.2
References
- http://securityreason.com/securityalert/1137
- http://www.securityfocus.com/archive/1/436810/100/200/threaded
- http://www.securityfocus.com/archive/1/436884/100/200/threaded
- http://securityreason.com/securityalert/1137
- http://www.securityfocus.com/archive/1/436810/100/200/threaded
- http://www.securityfocus.com/archive/1/436884/100/200/threaded
Products affected by CVE-2006-3209
-
cpe:2.3:o:microsoft:windows_xp:-