CVE-2006-2373

CRITICAL 10.0CVE-2006-2373 · Published 13/06/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."

References

secunia.com/advisories/20635 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
idefense.com/intelligence/vulnerabilities/display.php · Third Party Advisory
osvdb.org/26440 · Broken Link
securityfocus.com/bid/18356 · Patch
vupen.com/english/advisories/2006/2327 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/26828 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free