CVE-2006-2373

CRÍTICO 10.0CVE-2006-2373 · Published 13/06/2006 · updated 16/06/2026

En resumen

CVE-2006-2373 es una vulnerabilidad CRÍTICO (CVSS 10.0).
Probabilidad de explotación en los próximos 30 días (EPSS): 29.2%, mayor que el 98.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."

References

secunia.com/advisories/20635 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
idefense.com/intelligence/vulnerabilities/display.php · Third Party Advisory
osvdb.org/26440 · Broken Link
securityfocus.com/bid/18356 · Patch
vupen.com/english/advisories/2006/2327 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/26828 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free