Windows Print Spooler Subsystem GetPrinterData() Function Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1017330
|
|
SecurityTracker URL: http://securitytracker.com/id?1017330
|
|
CVE Reference: CVE-2006-6296
(Links to External Site)
|
Updated: May 22 2008
|
Original Entry Date: Dec 4 2006
|
Impact: Denial of service via network
|
Exploit Included: Yes
|
Version(s): 2000 SP4 Polish version, possibly others
|
Description: A vulnerability was reported in Windows Print Spooler. A remote user can cause denial of service conditions.
A remote user can send a specially crafted GetPrinterData request to cause the spooler subsystem to consume all available memory.
h07
discovered this vulnerability.
The original advisory and demonstration exploit is available at:
http://www.milw0rm.org/exploits/2879
|
Impact: A remote user can cause the spooler subsystem to consume all available memory on the target system.
|
Solution: No solution was available at the time of this entry.
|
Vendor URL: www.microsoft.com/ (Links to External Site)
|
Cause: State error
|
Underlying OS: Windows (2000)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 4 Dec 2006 11:44:32 -0500
Subject: MS Windows spoolss GetPrinterData() 0day Memory Allocation Remote DoS Exploit
|
http://www.milw0rm.org/exploits/2879
|
|
