CVE-2006-3440
Summary
| CVE | CVE-2006-3440 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-08-09 01:04:00 UTC |
| Updated | 2018-10-12 21:40:00 UTC |
| Description | Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability." |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows 2000 | All | sp4 | All | fr |
| Operating System | Microsoft | Windows 2000 | All | sp4 | All | fr |
| Operating System | Microsoft | Windows 2003 Server | 64-bit | All | All | All |
| Operating System | Microsoft | Windows 2003 Server | sp1 | All | All | All |
| Operating System | Microsoft | Windows 2003 Server | sp1 | All | itanium | All |
| Operating System | Microsoft | Windows 2003 Server | 64-bit | All | All | All |
| Operating System | Microsoft | Windows 2003 Server | sp1 | All | All | All |
| Operating System | Microsoft | Windows 2003 Server | sp1 | All | itanium | All |
| Operating System | Microsoft | Windows Xp | All | All | 64-bit | All |
| Operating System | Microsoft | Windows Xp | All | sp1 | tablet_pc | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | tablet_pc | All |
| Operating System | Microsoft | Windows Xp | All | All | 64-bit | All |
| Operating System | Microsoft | Windows Xp | All | sp1 | tablet_pc | All |
| Operating System | Microsoft | Windows Xp | All | sp2 | tablet_pc | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| Microsoft Winsock Gethostbyname Buffer Overflow Vulnerability | BID | www.securityfocus.com | |
| US-CERT Vulnerability Note VU#908276 | CERT-VN | www.kb.cert.org | Patch, US Government Resource |
| SecurityTracker.com Archives - Windows Winsock and DNS Client Buffer Overflows Let Remote Users Execute Arbitrary Code | SECTRACK | securitytracker.com | |
| US-CERT Technical Cyber Security Alert TA06-220A -- Microsoft Products Contain Multiple Vulnerabilities | CERT | www.us-cert.gov | Patch, US Government Resource |
| Microsoft Security Bulletin MS06-041 - Critical | Microsoft Docs | MS | docs.microsoft.com | |
| Windows DNS Resolution Code Execution Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.