National Cyber Awareness System

Vulnerability Summary for CVE-2006-0010

Overview

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-010A

Name: TA06-010A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-010A.html

US-CERT Vulnerability Note: VU#915930

Name: VU#915930

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/915930

External Source: BID

Name: 16194

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/16194

External Source: MS

Name: MS06-002

Type: Advisory; Patch Information

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-002.mspx

External Source: SECUNIA

Name: 18365

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/18365

External Source: XF

Name: win-embedded-fonts-bo(23922)

Hyperlink:http://xforce.iss.net/xforce/xfdb/23922

External Source: MISC

Name: http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525

Hyperlink:http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525

External Source: VUPEN

Name: ADV-2006-0118

Hyperlink:http://www.vupen.com/english/advisories/2006/0118

External Source: BUGTRAQ

Name: 20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/421885/100/0/threaded

External Source: OSVDB

Name: 18829

Hyperlink:http://www.osvdb.org/18829

External Source: EEYE

Name: EEYEB20050801

Hyperlink:http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm

External Source: SECTRACK

Name: 1015459

Hyperlink:http://securitytracker.com/id?1015459

External Source: SECUNIA

Name: 18391

Type: Advisory

Hyperlink:http://secunia.com/advisories/18391

External Source: SECUNIA

Name: 18311

Type: Advisory

Hyperlink:http://secunia.com/advisories/18311

US Government Resource: oval:org.mitre.oval:def:714

Name: oval:org.mitre.oval:def:714

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:714

US Government Resource: oval:org.mitre.oval:def:698

Name: oval:org.mitre.oval:def:698

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:698

US Government Resource: oval:org.mitre.oval:def:1491

Name: oval:org.mitre.oval:def:1491

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1491

US Government Resource: oval:org.mitre.oval:def:1462

Name: oval:org.mitre.oval:def:1462

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1462

US Government Resource: oval:org.mitre.oval:def:1185

Name: oval:org.mitre.oval:def:1185

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1185

US Government Resource: oval:org.mitre.oval:def:1126

Name: oval:org.mitre.oval:def:1126

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1126

References to Check Content

Identifier:oval:org.mitre.oval:def:698

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:698

Identifier:oval:org.mitre.oval:def:1462

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1462

Identifier:oval:org.mitre.oval:def:1491

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1491

Identifier:oval:org.mitre.oval:def:1185

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1185

Identifier:oval:org.mitre.oval:def:1126

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1126

Identifier:oval:org.mitre.oval:def:714

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:714