CVE-2006-2372 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 90.2% (pctl 100)
Patch early
A public exploit exists.
Description
Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 90.23% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-07-11 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | dhcp client service |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows - DHCP Client Broadcast (MS06-036) | 2006-07-21 |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html
- http://secunia.com/advisories/21010
- http://securityreason.com/securityalert/1201
- http://securitytracker.com/id?1016468
- http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf
- http://www.kb.cert.org/vuls/id/257164
- http://www.osvdb.org/27151
- http://www.securityfocus.com/archive/1/439675/100/0/threaded
- http://www.securityfocus.com/archive/1/444631/100/0/threaded
- http://www.securityfocus.com/bid/18923
- http://www.us-cert.gov/cas/techalerts/TA06-192A.html
- http://www.vupen.com/english/advisories/2006/2754
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-036
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A232
- https://www.exploit-db.com/exploits/2054
- http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html
- http://secunia.com/advisories/21010
- http://securityreason.com/securityalert/1201
- http://securitytracker.com/id?1016468
- http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf
→ the Explorer · watch your stack · NVD