vendor:
Windows
by:
Preddy
9.3
CVSS
HIGH
Remote Overflow
119
CWE
Product Name: Windows
Affected Version From: Windows XP SP1
Affected Version To: Windows 2K
Patch Exists: YES
Related CWE: CVE-2006-3439
CPE: o:microsoft:windows
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2006
Microsoft Windows CanonicalizePathName() Remote Overflow MSO6-040
This is an exploit for a vulnerability in Microsoft Windows CanonicalizePathName() which allows for a remote shell at port 54321 of the victim. It works against Windows XP SP1 and should give a crash on Win2k in services.exe.
Mitigation:
Microsoft released a patch for this vulnerability in 2006.
