CVE-2006-4692: Code Injection
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4692?
CVE-2006-4692 is considered a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2006-4692?
The recommended fix for CVE-2006-4692 is to apply available security updates for affected versions of Microsoft Windows or upgrade to newer versions.
Which versions of Microsoft Windows are affected by CVE-2006-4692?
CVE-2006-4692 affects Microsoft Windows XP SP1, SP2 and Windows Server 2003 SP1 and earlier.
What type of attack is associated with CVE-2006-4692?
CVE-2006-4692 is associated with remote user-assisted command execution attacks through crafted files.
What is an argument injection vulnerability as seen in CVE-2006-4692?
An argument injection vulnerability like CVE-2006-4692 allows attackers to manipulate command line arguments to execute unauthorized commands on the system.