CVE-2006-1313
medium · 6.8Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
6.8
CVSS
29.3%
EPSS (exploit prob.)
98th
EPSS percentile
2006-06-13
Published
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | datacenter_edition |
| microsoft | windows_2003_server | datacenter_edition |
| microsoft | windows_2003_server | datacenter_edition_64-bit |
| microsoft | windows_2003_server | datacenter_edition_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_edition |
| microsoft | windows_2003_server | enterprise_edition_64-bit |
| microsoft | windows_2003_server | enterprise_edition_64-bit |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | sp1 |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard_64-bit |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_98 | all versions |
| microsoft | windows_98se | all versions |
| microsoft | windows_me | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/20620
- http://securitytracker.com/id?1016283
- http://www.kb.cert.org/vuls/id/390044
- http://www.osvdb.org/26434
- http://www.securityfocus.com/bid/18359
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2321
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26805
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003
- http://secunia.com/advisories/20620
- http://securitytracker.com/id?1016283
- http://www.kb.cert.org/vuls/id/390044
- http://www.osvdb.org/26434
- http://www.securityfocus.com/bid/18359
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2321
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26805
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-1313