CVE-2006-3439: Buffer Overflow
Published Aug 9, 2006
·Updated
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
Affected Software
9 affected components
Microsoft Windows 2003 Server=64-bit
Microsoft Windows 2003 Server=itanium
Microsoft Windows 2003 Server=sp1
Microsoft Windows XP
Microsoft Windows XP=sp1
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=r2
Microsoft Windows 2000=sp4
Microsoft Windows XP=sp2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 9, 2006
CVE Published
01:04 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3439?
CVE-2006-3439 is considered critical as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2006-3439?
To fix CVE-2006-3439, ensure that your system is updated with the latest Microsoft security patches.
3
Which operating systems are affected by CVE-2006-3439?
CVE-2006-3439 affects Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Windows Server 2003 SP1.
4
Can CVE-2006-3439 be exploited remotely?
Yes, CVE-2006-3439 can be exploited remotely by sending a crafted RPC message.
5
Is anonymous access a factor in CVE-2006-3439?
Yes, CVE-2006-3439 can be exploited by remote attackers, including anonymous users.