CVE-2006-0010 Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an....
HighCVSS 9.3
EPSS 33.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = datacenter_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = standard-sp1 | No fix listed |
| Microsoft windows 2003 server | = standard_64-bit | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 2003 server | = web-sp1 | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 3.5.1 | No fix listed |
| Microsoft windows nt | = 3.5.1-sp1 | No fix listed |
| Microsoft windows nt | = 3.5.1-sp2 | No fix listed |
| Microsoft windows nt | = 3.5.1-sp3 | No fix listed |
| Microsoft windows nt | = 3.5.1-sp4 | No fix listed |
| Microsoft windows nt | = 3.5.1-sp5 | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability mailing-list
- 18311 third-party-advisory vendor-advisory
- 18365 patch third-party-advisory vendor-advisory
- 18391 third-party-advisory vendor-advisory
- 1015459 vdb-entry
- support.avaya.com
- EEYEB20050801 third-party-advisory
- VU#915930 third-party-advisory us-government-resource
- 18829 vdb-entry
- 20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability mailing-list
- 16194 patch vdb-entry
- TA06-010A third-party-advisory us-government-resource
- ADV-2006-0118 vdb-entry
- www130.nortelnetworks.com
- MS06-002 vendor-advisory
- win-embedded-fonts-bo(23922) vdb-entry
- oval:org.mitre.oval:def:1126 signature vdb-entry
- oval:org.mitre.oval:def:1185 signature vdb-entry
- oval:org.mitre.oval:def:1462 signature vdb-entry
- oval:org.mitre.oval:def:1491 signature vdb-entry
- oval:org.mitre.oval:def:698 signature vdb-entry
- oval:org.mitre.oval:def:714 signature vdb-entry