ByteOS Network

NVD Vulnerability Details :

CVE-2006-0010

Modified

Source-secure@microsoft.com

Published At-10 Jan, 2006 | 22:03

Updated At-16 Apr, 2026 | 00:27

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

Hyperlink	Source	Resource
http://seclists.org/fulldisclosure/2006/Jan/363	secure@microsoft.com	N/A
http://secunia.com/advisories/18311	secure@microsoft.com	Vendor Advisory
http://secunia.com/advisories/18365	secure@microsoft.com	Patch Vendor Advisory
http://secunia.com/advisories/18391	secure@microsoft.com	Vendor Advisory
http://securitytracker.com/id?1015459	secure@microsoft.com	N/A
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm	secure@microsoft.com	N/A
http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html	secure@microsoft.com	N/A
http://www.kb.cert.org/vuls/id/915930	secure@microsoft.com	Third Party Advisory US Government Resource
http://www.osvdb.org/18829	secure@microsoft.com	N/A
http://www.securityfocus.com/archive/1/421885/100/0/threaded	secure@microsoft.com	N/A
http://www.securityfocus.com/bid/16194	secure@microsoft.com	Patch
http://www.us-cert.gov/cas/techalerts/TA06-010A.html	secure@microsoft.com	US Government Resource
http://www.vupen.com/english/advisories/2006/0118	secure@microsoft.com	N/A
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002	secure@microsoft.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/23922	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714	secure@microsoft.com	N/A
http://seclists.org/fulldisclosure/2006/Jan/363	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/18311	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/18365	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/18391	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1015459	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/915930	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
http://www.osvdb.org/18829	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/421885/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/16194	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.us-cert.gov/cas/techalerts/TA06-010A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2006/0118	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/23922	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History