CVE-2006-2334: Low severity Microsoft Windows 2000 vulnerability
The RtlDosPathNameToNtPathNameU API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2334?
CVE-2006-2334 is classified as a moderate severity vulnerability.
How do I fix CVE-2006-2334?
The recommended fix for CVE-2006-2334 is to apply the latest security updates from Microsoft.
Which versions of Windows are affected by CVE-2006-2334?
CVE-2006-2334 affects Microsoft Windows 2000 SP4 and Windows XP SP2.
What type of attack does CVE-2006-2334 enable?
CVE-2006-2334 allows context-dependent attackers to create inaccessible files due to improper path conversion.
Can I exploit CVE-2006-2334 remotely?
CVE-2006-2334 is not a remote exploitation vulnerability; it requires local access to the affected system.