QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-0008

Back to search

CVE-2006-0008

Published: Feb 14, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:1688
vdb-entry
signature
x_refsource_OVAL
ADV-2006-0578
vdb-entry
x_refsource_VUPEN
16643
vdb-entry
x_refsource_BID
1015631
vdb-entry
x_refsource_SECTRACK
18859
third-party-advisory
x_refsource_SECUNIA
VU#739844
third-party-advisory
x_refsource_CERT-VN
MS06-009
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:1595
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:727
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:1664
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:1650
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now