CVE-2006-2379 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 54.1% (pctl 99)
Patch early
A public exploit exists.
Description
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 54.06% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-06-13 |
| Last modified | 2026-06-16 |
Affected (4)
| Vendor | Product |
|---|---|
| microsoft | windows 2000 |
| microsoft | windows 2003 server |
| microsoft | windows nt |
| microsoft | windows xp |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow | 2006-06-30 |
References
- http://secunia.com/advisories/20639
- http://securitytracker.com/id?1016290
- http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702
- http://www.kb.cert.org/vuls/id/722753
- http://www.osvdb.org/26433
- http://www.securityfocus.com/archive/1/438482/100/0/threaded
- http://www.securityfocus.com/archive/1/438609/100/0/threaded
- http://www.securityfocus.com/bid/18374
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2329
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26834
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1483
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1712
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1776
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1787
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2018
- http://secunia.com/advisories/20639
- http://securitytracker.com/id?1016290
→ the Explorer · watch your stack · NVD