VDB
CVE-2006-3448
CVE-2006-3448
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
EPSS 62.54% · 98.4th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
62.54%
98.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | step-by-step_interactive_training | |
| n/a | n/a | n/a |
Timeline
- Feb 13, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 28, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Aug 26, 2023 EPSS Score
References
- ADV-2007-0574 vdb
- MS07-005 vendor-advisory
- 24121 third-party-advisory
- ms-stepbystep-bookmark-bo(30596) vdb
- VU#466873 third-party-advisory
- oval:org.mitre.oval:def:162 vdb
- 20070213 MS Interactive Training .cbo Overflow mailing-list
- TA07-044A third-party-advisory
- 22484 vdb
- 1017632 vdb
- 31883 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-3448 advisory