NVD

Id
58755  
Name
CVE-2006-0008  
Description
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2006-02-14  
Modified Date
2017-07-10  
Seq
2006-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301434 58755 CVE-2006-0008 oval:org.mitre.oval:def:1595  View
301435 58755 CVE-2006-0008 oval:org.mitre.oval:def:1650  View
301436 58755 CVE-2006-0008 oval:org.mitre.oval:def:1664  View
301437 58755 CVE-2006-0008 oval:org.mitre.oval:def:1688  View
301438 58755 CVE-2006-0008 oval:org.mitre.oval:def:727  View
301439 58755 CVE-2006-0008 1015631  View
301440 58755 CVE-2006-0008 VU#739844  View
301441 58755 CVE-2006-0008 MS06-009  View
301442 58755 CVE-2006-0008 http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html  View
301443 58755 CVE-2006-0008 20060215 Security advisory: Windows IME Vulnerability (MS06-009)  View
301444 58755 CVE-2006-0008 16643  View
301445 58755 CVE-2006-0008 ADV-2006-0578  View
301446 58755 CVE-2006-0008 win-korean-ime-privilege-elevation(24492)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57911 JVNDB-2006-000107 Microsoft Windows の韓国語版 IME における権限昇格の脆弱性 Microsoft Windows に実装されている韓国語版 IME には設計上の不備が存在し、不適切に LocalSystem 権限で動作する特定の機能がログオン画面において悪用された場合に、不正に権限を昇格される脆弱性が存在します。 CVE-2006-0008 16110 CVE-2006-0008 58755 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000107.html 2006-02-14 2007-04-01 View