CVE-2006-0012
medium · 5.1Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
5.1
CVSS
24.8%
EPSS (exploit prob.)
98th
EPSS percentile
2006-04-12
Published
AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | datacenter_64-bit |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard_64-bit |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_98 | all versions |
| microsoft | windows_98se | all versions |
| microsoft | windows_me | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/19606
- http://securitytracker.com/id?1015897
- http://www.kb.cert.org/vuls/id/641460
- http://www.osvdb.org/24516
- http://www.securityfocus.com/bid/17464
- http://www.us-cert.gov/cas/techalerts/TA06-101A.html
- http://www.vupen.com/english/advisories/2006/1320
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25554
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1679
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1764
- http://secunia.com/advisories/19606
- http://securitytracker.com/id?1015897
- http://www.kb.cert.org/vuls/id/641460
- http://www.osvdb.org/24516
- http://www.securityfocus.com/bid/17464
- http://www.us-cert.gov/cas/techalerts/TA06-101A.html
- http://www.vupen.com/english/advisories/2006/1320
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25554
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-0012