$ cve CVE-2006-2374 JSON

CVE-2006-2374 EXPLOIT

5.5

MEDIUM · CVSS 3.1 · EPSS 1.7% (pctl 77)

Patch early

A public exploit exists.

Description

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."

Scoring

CVSS	5.5 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS	1.75% — more likely to be exploited than 77% of all CVEs
Weakness	CWE-667
On CISA KEV	no
Public exploit	yes
Published	2006-06-13
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows XP/2000 - 'Mrxsmb.sys' Local Privilege Escalation (MS06-030)	2006-06-14
exploit-db	Microsoft SMB Driver - Local Denial of Service	2006-06-13

References

→ the Explorer · watch your stack · NVD