CVE-2006-1313

Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/20620	Patch Vendor Advisory
http://securitytracker.com/id?1016283
http://www.kb.cert.org/vuls/id/390044	US Government Resource
http://www.osvdb.org/26434
http://www.securityfocus.com/bid/18359	Patch
http://www.us-cert.gov/cas/techalerts/TA06-164A.html	US Government Resource
http://www.vupen.com/english/advisories/2006/2321
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023
https://exchange.xforce.ibmcloud.com/vulnerabilities/26805
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003
http://secunia.com/advisories/20620	Patch Vendor Advisory
http://securitytracker.com/id?1016283
http://www.kb.cert.org/vuls/id/390044	US Government Resource
http://www.osvdb.org/26434
http://www.securityfocus.com/bid/18359	Patch
http://www.us-cert.gov/cas/techalerts/TA06-164A.html	US Government Resource
http://www.vupen.com/english/advisories/2006/2321
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023
https://exchange.xforce.ibmcloud.com/vulnerabilities/26805
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_2000::sp1::::::*
	cpe:2.3:o:microsoft:windows_2000::sp2::::::*
	cpe:2.3:o:microsoft:windows_2000::sp3::::::*
	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1::::::
	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1::::::
	cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1::::::
	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1::::::
	cpe:2.3:o:microsoft:windows_2003_server:r2::datacenter_64-bit:::::
	cpe:2.3:o:microsoft:windows_2003_server:sp1::enterprise:::::
	cpe:2.3:o:microsoft:windows_2003_server:standard:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:standard:sp1::::::
	cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:web:::::::*
	cpe:2.3:o:microsoft:windows_2003_server:web:sp1::::::
	cpe:2.3:o:microsoft:windows_98::gold::::::*
	cpe:2.3:o:microsoft:windows_98se::::::::
	cpe:2.3:o:microsoft:windows_me::::::::
	cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
	cpe:2.3:o:microsoft:windows_xp:::home:::::*
	cpe:2.3:o:microsoft:windows_xp:::media_center:::::*
	cpe:2.3:o:microsoft:windows_xp::gold:professional:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:home:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:media_center:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:home:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:media_center:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::

History

21 Nov 2024, 00:08

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/20620 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/20620 - Patch, Vendor Advisory
References	~~() http://securitytracker.com/id?1016283 -~~	() http://securitytracker.com/id?1016283 -
References	~~() http://www.kb.cert.org/vuls/id/390044 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/390044 - US Government Resource
References	~~() http://www.osvdb.org/26434 -~~	() http://www.osvdb.org/26434 -
References	~~() http://www.securityfocus.com/bid/18359 - Patch~~	() http://www.securityfocus.com/bid/18359 - Patch
References	~~() http://www.us-cert.gov/cas/techalerts/TA06-164A.html - US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA06-164A.html - US Government Resource
References	~~() http://www.vupen.com/english/advisories/2006/2321 -~~	() http://www.vupen.com/english/advisories/2006/2321 -
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/26805 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/26805 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003 -

Information

Published : 2006-06-13 19:06

Updated : 2025-04-03 01:03

NVD link : CVE-2006-1313

Mitre link : CVE-2006-1313

CVE.ORG link : CVE-2006-1313

JSON object : View

Products Affected

microsoft

windows_2003_server
windows_2000
windows_98
windows_xp
windows_me
windows_98se

CWE

NVD-CWE-Other

{"id": "CVE-2006-1313", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2006-06-13T19:06:00.000", "references": [{"url": "http://secunia.com/advisories/20620", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "http://securitytracker.com/id?1016283", "source": "secure@microsoft.com"}, {"url": "http://www.kb.cert.org/vuls/id/390044", "tags": ["US Government Resource"], "source": "secure@microsoft.com"}, {"url": "http://www.osvdb.org/26434", "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/18359", "tags": ["Patch"], "source": "secure@microsoft.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA06-164A.html", "tags": ["US Government Resource"], "source": "secure@microsoft.com"}, {"url": "http://www.vupen.com/english/advisories/2006/2321", "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023", "source": "secure@microsoft.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26805", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003", "source": "secure@microsoft.com"}, {"url": "http://secunia.com/advisories/20620", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016283", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/390044", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/26434", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/18359", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA06-164A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2321", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26805", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will \"release objects early\" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294EBA01-147B-4DA0-937E-ACBB655EDE53"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E8B7346-F2AA-434C-A048-7463EC1BB117"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "480D8321-EB2F-4626-A16B-F3C2B771EDB3"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3538DA2-B040-426D-9ADC-7C5BE9C2D4E4"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F633513-6E9A-4F2D-964A-6AFDE5307AD7"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ED8947F-2490-41CA-A7B3-2C93D69C3F8E"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B127407D-AE50-4AFE-A780-D85B5AF44A2D"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6E3EB90-92C9-4B69-B58C-087D382DC579"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3AF27C8-C2FA-477D-8332-B96277530B4E"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB1CE6C6-6E6E-4C4E-A7B1-DC6651864298"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E9E190B-A109-4177-A5B5-7BD32573762E"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "709E6DA0-09F8-4EAB-B1B2-D4D0A7771AC1"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B5F54BB-A80E-42F2-A700-82C1240E23D0"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B518E945-5FDE-4A37-878D-6946653C91F7"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"}, {"criteria": "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D3B703C-79B2-4FA2-9E12-713AB977A880"}, {"criteria": "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA733AD2-D948-46A0-A063-D29081A56F1F"}, {"criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "403945FA-8676-4D98-B903-48452B46F48F"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A05337E-18A5-4939-85A0-69583D9B5AD9"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB2BE2DE-7B06-47ED-A674-15D45448F357"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}

6.8 /10