Read the docs
TI-2006-03249 Aliases CVE-2006-3351GHSA-5jgr-h98g-jpj4

Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows…

Priority LOW 34Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.

Why it matters now

EPSS 0.06933 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 55

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_2003_server:3.1.0.3270:*:*:*:*:*:*:*3.1.0.3270VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*datacenter_64-bit sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*datacenter_64-bit sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*datacenter_editionVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*datacenter_edition sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:*datacenter_edition sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:*datacenter_edition_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:*datacenter_edition_64-bit sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1_beta_1:*:*:*:*:*:*datacenter_edition_64-bit sp1_beta_1VulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_2003_server:3.1.0.3270:*:*:*:*:*:*:* Versions 3.1.0.3270 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:* Versions 64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:* Versions datacenter_64-bit sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:* Versions datacenter_64-bit sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:* Versions datacenter_edition Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:* Versions datacenter_edition sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:* Versions datacenter_edition sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:* Versions datacenter_edition_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:* Versions datacenter_edition_64-bit sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1_beta_1:*:*:*:*:*:* Versions datacenter_edition_64-bit sp1_beta_1 Vulnerable ·Microsoft
Show 45 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*enterpriseVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*enterprise sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*enterprise sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*enterprise_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*enterprise_64-bit sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*enterprise_64-bit sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*enterprise_edition sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:*enterprise_edition sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:*enterprise_edition_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:*enterprise_edition_64-bit sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1_beta_1:*:*:*:*:*:*enterprise_edition_64-bit sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*itaniumVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*r2 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*r2 sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*standardVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*standardVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*standard sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*standard sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*standard_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*webVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*web sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*web sp1_beta_1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:gold:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:*:*:*:*:*:*:*ibm_oem_versionVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:sp1:*:*:*:*:*:*ibm_oem_version sp1VulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* Versions enterprise Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:* Versions enterprise sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:* Versions enterprise sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* Versions enterprise_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:* Versions enterprise_64-bit sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:* Versions enterprise_64-bit sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:* Versions enterprise_edition sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:* Versions enterprise_edition sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:* Versions enterprise_edition_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:* Versions enterprise_edition_64-bit sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1_beta_1:*:*:*:*:*:* Versions enterprise_edition_64-bit sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:* Versions itanium Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:* Versions r2 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:* Versions r2 sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:* Versions sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:* Versions sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:* Versions sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:* Versions standard Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* Versions standard Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:* Versions standard sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:* Versions standard sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:* Versions standard_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* Versions web Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:* Versions web sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:* Versions web sp1_beta_1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:gold:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:*:*:*:*:*:*:* Versions ibm_oem_version Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:sp1:*:*:*:*:*:* Versions ibm_oem_version sp1 Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3351
  2. 2026-10-03 Alias added: GHSA-5jgr-h98g-jpj4

References

Advisory 1

  • TI-2009-01458 Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in… KEVCVSS 3.1HIGH 8.8
  • TI-2008-00014 Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active… KEVCVSS 3.1HIGH 8.8
  • TI-2015-01523 Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2… KEVCVSS 3.1HIGH 7.8
  • TI-2013-04422 NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows… KEVCVSS 3.1HIGH 7.8
  • TI-2011-00574 DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003… CVSS 3.1CRITICAL 9.8
  • TI-2006-03334 Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and… CVSS 2.0HIGH 10.0
See all 403 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences