CVE-2006-3448 Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllab...
HighCVSS 9.3
EPSS 37.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft step-by-step interactive training | All versions | No fix listed |
References
- 24121 third-party-advisory vendor-advisory
- VU#466873 third-party-advisory us-government-resource
- 31883 vdb-entry
- 20070213 MS Interactive Training .cbo Overflow mailing-list
- 22484 vdb-entry
- 1017632 vdb-entry
- TA07-044A third-party-advisory us-government-resource
- ADV-2007-0574 vdb-entry vendor-advisory
- MS07-005 vendor-advisory
- ms-stepbystep-bookmark-bo(30596) vdb-entry
- oval:org.mitre.oval:def:162 signature vdb-entry