Windows Print Spooler Subsystem GetPrinterData() Function Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1017330 |
|
SecurityTracker URL: http://securitytracker.com/id/1017330
|
|
CVE Reference:
CVE-2006-6296
(Links to External Site)
|
Updated: May 22 2008
|
Original Entry Date: Dec 4 2006
|
Impact:
Denial of service via network
|
Exploit Included: Yes
|
Version(s): 2000 SP4 Polish version, possibly others
|
Description:
A vulnerability was reported in Windows Print Spooler. A remote user can cause denial of service conditions.
A remote user can send a specially crafted GetPrinterData request to cause the spooler subsystem to consume all available memory.
h07 discovered this vulnerability.
The original advisory and demonstration exploit is available at:
http://www.milw0rm.org/exploits/2879
|
Impact:
A remote user can cause the spooler subsystem to consume all available memory on the target system.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.microsoft.com/ (Links to External Site)
|
Cause:
State error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 4 Dec 2006 11:44:32 -0500
Subject: MS Windows spoolss GetPrinterData() 0day Memory Allocation Remote DoS Exploit
|
http://www.milw0rm.org/exploits/2879
|
|
