CVEvulnerability

CVE-2006-3441

10.0 HIGH Published 2006-08-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.

Affected configurations

• microsoft windows 2000 • microsoft windows 2003 server 64-bit • microsoft windows 2003 server sp1 • microsoft windows xp

References