CVE-2006-6296

MOYENNE 6.1CVE-2006-6296 · Published 05/12/2006 · updated 16/06/2026

En bref

CVE-2006-6296 est une vulnérabilité MOYENNE (CVSS 6.1).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 22.0%, plus élevée que 97.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.

References

research.eeye.com/html/alerts/zeroday/20051116.html
secunia.com/advisories/23196 · Vendor Advisory
securitytracker.com/id
eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
kb.cert.org/vuls/id/914617 · US Government Resource
securityfocus.com/bid/21401 · Exploit
vupen.com/english/advisories/2006/4827 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30717
exploit-db.com/exploits/2879

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free