CVEvulnerability

CVE-2006-3351

5.4 MEDIUM Published 2006-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C

Description

Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.

Affected configurations

• microsoft windows 2003 server 3.1.0.3270 • microsoft windows 2003 server 64-bit • microsoft windows 2003 server datacenter 64-bit • microsoft windows 2003 server datacenter edition • microsoft windows 2003 server datacenter edition 64-bit • microsoft windows 2003 server enterprise • microsoft windows 2003 server enterprise 64-bit • microsoft windows 2003 server enterprise edition • microsoft windows 2003 server enterprise edition 64-bit • microsoft windows 2003 server itanium • microsoft windows 2003 server r2 • microsoft windows 2003 server sp1 • microsoft windows 2003 server standard • microsoft windows 2003 server standard 64-bit • microsoft windows 2003 server web • microsoft windows xp • microsoft windows xp ibm oem version

References