NVD

Id
58757  
Name
CVE-2006-0010  
Description
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2006-01-10  
Modified Date
2017-07-10  
Seq
2006-0010  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301480 58757 CVE-2006-0010 oval:org.mitre.oval:def:1126  View
301481 58757 CVE-2006-0010 oval:org.mitre.oval:def:1185  View
301482 58757 CVE-2006-0010 oval:org.mitre.oval:def:1462  View
301483 58757 CVE-2006-0010 oval:org.mitre.oval:def:1491  View
301484 58757 CVE-2006-0010 oval:org.mitre.oval:def:698  View
301485 58757 CVE-2006-0010 oval:org.mitre.oval:def:714  View
301486 58757 CVE-2006-0010 20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability  View
301487 58757 CVE-2006-0010 1015459  View
301488 58757 CVE-2006-0010 http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm  View
301489 58757 CVE-2006-0010 EEYEB20050801  View
301490 58757 CVE-2006-0010 VU#915930  View
301491 58757 CVE-2006-0010 MS06-002  View
301492 58757 CVE-2006-0010 20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability  View
301493 58757 CVE-2006-0010 16194  View
301494 58757 CVE-2006-0010 TA06-010A  View
301495 58757 CVE-2006-0010 ADV-2006-0118  View
301496 58757 CVE-2006-0010 http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525  View
301497 58757 CVE-2006-0010 win-embedded-fonts-bo(23922)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57817 JVNDB-2006-000013 Microsoft Windows の T2EMBED.DLL におけるヒープオーバーフローの脆弱性 Microsoft Windows に含まれる T2EMBED.DLL には、圧縮された Web フォントファイルのデータに関して、メモリ割り当て処理を行う MTX_LZCOMP_UnPackMemory 関数において、取り扱うデータの妥当性の確認が不適切であるため、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-0010 16112 CVE-2006-0010 58757 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000013.html 2006-01-10 2007-04-01 View