← Back

CVE-2006-2374

nvd nist
Published: Jun 13, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."

Affected (9)

Microsoft
3 products
Windows 2000
Windows 2003 Server
Windows Xp
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Windows 2000
All versions
Microsoft
Windows 2003 Server
All versions
Windows 2003 Server
All versions
Windows 2003 Server
All versions
Windows 2003 Server
All versions
Windows 2003 Server
All versions
Microsoft
Windows Xp
All versions
Windows Xp
All versions
Windows Xp
All versions

Related CWEs

CWE-667
Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (28)

Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
Not Applicable
Source: secure@microsoft.com
Broken Link
Source: secure@microsoft.com
Broken LinkExploitPatchThird Party AdvisoryVDB Entry
Source: secure@microsoft.com
Broken LinkVendor Advisory
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: secure@microsoft.com
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploitPatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory

Timeline

No history available yet.