Oval Definition:	oval:org.mitre.oval:def:600
Revision Date: 2011-05-09 Version: 23 Title: Mailslot Heap Overflow Vulnerability Description: Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-1314 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Win2K,SP4 Microsoft Windows 2000 SP4 or later is installed AND the version of srv.sys is less than 5.0.2195.7087 OR WinXP,SP1 (32-bit) Microsoft Windows XP SP1 (32-bit) is installed AND the version of srv.sys is less than 5.1.2600.1832 OR WinXP,SP2 Microsoft Windows XP SP2 or later is installed AND the version of srv.sys is less than 5.1.2600.2893 OR WinXP,SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND the version of srv.sys is less than 5.2.3790.2691 OR S03-Gold Microsoft Windows Server 2003 (x86) Gold is installed AND the version of srv.sys is less than 5.2.3790.526 OR S03,SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND the version of srv.sys is less than 5.2.3790.2691
BACK