CVE-2006-6296

MEDIUM 6.1CVE-2006-6296 · Published 05/12/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.

References

research.eeye.com/html/alerts/zeroday/20051116.html
secunia.com/advisories/23196 · Vendor Advisory
securitytracker.com/id
eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
kb.cert.org/vuls/id/914617 · US Government Resource
securityfocus.com/bid/21401 · Exploit
vupen.com/english/advisories/2006/4827 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30717
exploit-db.com/exploits/2879

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free