CVEvulnerability
CVE-2006-3440
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server 64-bit
• microsoft windows 2003 server sp1
• microsoft windows xp
References
- http://secunia.com/advisories/21394 secunia.com
- http://securitytracker.com/id?1016653 securitytracker.com
- http://www.kb.cert.org/vuls/id/908276 Patch, US Government Resource
- http://www.securityfocus.com/bid/19319 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2006/3211 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747 oval.cisecurity.org
- http://secunia.com/advisories/21394 secunia.com
- http://securitytracker.com/id?1016653 securitytracker.com
- http://www.kb.cert.org/vuls/id/908276 Patch, US Government Resource
- http://www.securityfocus.com/bid/19319 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, US Government Resource
- http://www.vupen.com/english/advisories/2006/3211 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-041 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A747 oval.cisecurity.org