CVE-2006-1314

ÉLEVÉE 7.5CVE-2006-1314 · Published 11/07/2006 · updated 16/06/2026

En bref

CVE-2006-1314 est une vulnérabilité ÉLEVÉE (CVSS 7.5).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 61.2%, plus élevée que 99.2% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.

References

secunia.com/advisories/21007
securityreason.com/securityalert/1212
kb.cert.org/vuls/id/189140 · US Government Resource
osvdb.org/27154
securityfocus.com/archive/1/439773/100/0/threaded
securityfocus.com/bid/18863
tippingpoint.com/security/advisories/TSRT-06-02.html · Patch
us-cert.gov/cas/techalerts/TA06-192A.html · US Government Resource
vupen.com/english/advisories/2006/2753
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035
exchange.xforce.ibmcloud.com/vulnerabilities/26818
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A600

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free