CVE-2006-2374

5.5 MEDIUM

Published: June 13, 2006 Modified: April 16, 2026

Description

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/20635

Source: secure@microsoft.com

Broken Link Third Party Advisory

http://securitytracker.com/id?1016288

Source: secure@microsoft.com

Broken Link Third Party Advisory VDB Entry

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409

Source: secure@microsoft.com

Not Applicable

http://www.osvdb.org/26439

Source: secure@microsoft.com

Broken Link

http://www.securityfocus.com/bid/18357

Source: secure@microsoft.com

Broken Link Exploit Patch Third Party Advisory VDB Entry

http://www.vupen.com/english/advisories/2006/2327

Source: secure@microsoft.com

Broken Link Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030

Source: secure@microsoft.com

Patch Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26830

Source: secure@microsoft.com

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827

Source: secure@microsoft.com

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841

Source: secure@microsoft.com

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850

Source: secure@microsoft.com

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979

Source: secure@microsoft.com

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030

Source: secure@microsoft.com

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060

Source: secure@microsoft.com

Broken Link Third Party Advisory

http://secunia.com/advisories/20635

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

http://securitytracker.com/id?1016288

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory VDB Entry

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://www.osvdb.org/26439

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/18357

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Exploit Patch Third Party Advisory VDB Entry

http://www.vupen.com/english/advisories/2006/2327

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26830

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1827

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1841

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1850

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1979

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2030

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2060

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory

28 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.5 / 10.0

EPSS (Exploit Probability)

0.6%

68th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-667

Affected Vendors

microsoft

Related CVEs