MEDIUM
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
Published Apr 12, 2006
5.1
MEDIUMCVSS 2.0
EPSS 24.78%
Description
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
Affected products
No data.
OR
- n/a
- n/a
- n/a
- n/a
- n/a
- datacenter_64-bit
- enterprise
- enterprise
- enterprise_64-bit
- enterprise_64-bit
- r2
- r2
- r2
- standard
- standard
- standard_64-bit
- web
- web
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (14)
- http://secunia.com/advisories/19606 third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
- http://securitytracker.com/id?1015897 vdb-entryx_refsource_SECTRACK
- http://www.kb.cert.org/vuls/id/641460 third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
- http://www.osvdb.org/24516 vdb-entryx_refsource_OSVDB
- http://www.securityfocus.com/bid/17464 vdb-entryx_refsource_BID
- http://www.us-cert.gov/cas/techalerts/TA06-101A.html third-party-advisoryx_refsource_CERTUS Government Resource
- http://www.vupen.com/english/advisories/2006/1320 vdb-entryx_refsource_VUPEN
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015 vendor-advisoryx_refsource_MS
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25554 vdb-entryx_refsource_XF
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1679 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1764 vdb-entrysignaturex_refsource_OVAL
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microsoft
Published Apr 12, 2006
Updated Aug 7, 2024
Reserved Nov 9, 2005
Link CVE-2006-0012
CISA Vulnrichment
Updated n/a