CVEvulnerability

CVE-2006-1314

7.5 HIGH Published 2006-07-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-07-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.

Affected configurations

• microsoft windows 2000 • microsoft windows 2003 server 64-bit • microsoft windows 2003 server itanium • microsoft windows 2003 server r2 • microsoft windows 2003 server sp1 • microsoft windows xp

References