cbcvebase.
CVE-2006-3445
published 2006-11-14

CVE-2006-3445: Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows…

PriorityP351high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
40.14%
98.5th percentile
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.

Affected

4 ranges
VendorProductVersion rangeFixed in
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_2003_server——
microsoftwindows_2003_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.