CVE

Id
16136  
CVE No.
CVE-2006-0032  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.  
Phase
Assigned (20051130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
127162 16136 CVE-2006-0032 BUGTRAQ:20061001 Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]  View
127163 16136 CVE-2006-0032 URL:http://www.securityfocus.com/archive/1/archive/1/447511/100/0/threaded  View
127164 16136 CVE-2006-0032 BUGTRAQ:20061002 IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053])  View
127165 16136 CVE-2006-0032 URL:http://www.securityfocus.com/archive/1/archive/1/447509/100/0/threaded  View
127166 16136 CVE-2006-0032 MISC:http://www.geocities.jp/ptrs_sec/advisory09e.html  View
127167 16136 CVE-2006-0032 HP:HPSBST02134  View
127168 16136 CVE-2006-0032 URL:http://www.securityfocus.com/archive/1/archive/1/446630/100/100/threaded  View
127169 16136 CVE-2006-0032 HP:SSRT061187  View
127170 16136 CVE-2006-0032 URL:http://www.securityfocus.com/archive/1/archive/1/446630/100/100/threaded  View
127171 16136 CVE-2006-0032 MS:MS06-053  View
127172 16136 CVE-2006-0032 URL:http://www.microsoft.com/technet/security/Bulletin/MS06-053.mspx  View
127173 16136 CVE-2006-0032 CERT:TA06-255A  View
127174 16136 CVE-2006-0032 URL:http://www.us-cert.gov/cas/techalerts/TA06-255A.html  View
127175 16136 CVE-2006-0032 CERT-VN:VU#108884  View
127176 16136 CVE-2006-0032 URL:http://www.kb.cert.org/vuls/id/108884  View
127177 16136 CVE-2006-0032 BID:19927  View
127178 16136 CVE-2006-0032 URL:http://www.securityfocus.com/bid/19927  View
127179 16136 CVE-2006-0032 VUPEN:ADV-2006-3564  View
127180 16136 CVE-2006-0032 URL:http://www.vupen.com/english/advisories/2006/3564  View
127181 16136 CVE-2006-0032 OVAL:oval:org.mitre.oval:def:535  View
127182 16136 CVE-2006-0032 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:535  View
127183 16136 CVE-2006-0032 SECTRACK:1016826  View
127184 16136 CVE-2006-0032 URL:http://securitytracker.com/id?1016826  View
127185 16136 CVE-2006-0032 SECUNIA:21861  View
127186 16136 CVE-2006-0032 URL:http://secunia.com/advisories/21861  View
127187 16136 CVE-2006-0032 XF:ms-indexing-service-xss(28651)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58071 JVNDB-2006-000267 Microsoft Windows の CRpcIoManagerServer::BuildContext() 関数におけるヒープオーバーフローの脆弱性 ------------ CVE-2006-0034 16136 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000267.html  View