CVE-2006-0010

N/A Unknown
Published: January 10, 2006 Modified: April 16, 2026
View on NVD

Description

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://seclists.org/fulldisclosure/2006/Jan/363
Source: secure@microsoft.com
http://secunia.com/advisories/18311
Source: secure@microsoft.com
Vendor Advisory
http://secunia.com/advisories/18365
Source: secure@microsoft.com
Patch Vendor Advisory
http://secunia.com/advisories/18391
Source: secure@microsoft.com
Vendor Advisory
http://securitytracker.com/id?1015459
Source: secure@microsoft.com
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
Source: secure@microsoft.com
http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html
Source: secure@microsoft.com
http://www.kb.cert.org/vuls/id/915930
Source: secure@microsoft.com
Third Party Advisory US Government Resource
http://www.osvdb.org/18829
Source: secure@microsoft.com
http://www.securityfocus.com/archive/1/421885/100/0/threaded
Source: secure@microsoft.com
http://www.securityfocus.com/bid/16194
Source: secure@microsoft.com
Patch
http://www.us-cert.gov/cas/techalerts/TA06-010A.html
Source: secure@microsoft.com
US Government Resource
http://www.vupen.com/english/advisories/2006/0118
Source: secure@microsoft.com
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525
Source: secure@microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002
Source: secure@microsoft.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23922
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698
Source: secure@microsoft.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714
Source: secure@microsoft.com
http://seclists.org/fulldisclosure/2006/Jan/363
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/18311
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/18365
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://secunia.com/advisories/18391
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securitytracker.com/id?1015459
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/915930
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory US Government Resource
http://www.osvdb.org/18829
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/421885/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/16194
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.us-cert.gov/cas/techalerts/TA06-010A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2006/0118
Source: af854a3a-2127-422b-91ae-364da2661108
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525
Source: af854a3a-2127-422b-91ae-364da2661108
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/23922
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1126
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1185
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1462
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1491
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A714
Source: af854a3a-2127-422b-91ae-364da2661108

44 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
49.8%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

microsoft

Related CVEs

CVE-2025-71256 7.5
CVE-2025-71255 7.5
CVE-2025-71254 7.5
CVE-2025-71253 7.5
CVE-2025-71252 7.5