CVE-2006-2372

N/A Unknown

Published: July 11, 2006 Modified: April 16, 2026

Description

Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html

Source: secure@microsoft.com

http://secunia.com/advisories/21010

Source: secure@microsoft.com

Patch Vendor Advisory

http://securityreason.com/securityalert/1201

Source: secure@microsoft.com

http://securitytracker.com/id?1016468

Source: secure@microsoft.com

http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf

Source: secure@microsoft.com

Patch

http://www.kb.cert.org/vuls/id/257164

Source: secure@microsoft.com

US Government Resource

http://www.osvdb.org/27151

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/439675/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/444631/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/18923

Source: secure@microsoft.com

Patch

http://www.us-cert.gov/cas/techalerts/TA06-192A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2006/2754

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-036

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A232

Source: secure@microsoft.com

https://www.exploit-db.com/exploits/2054

Source: secure@microsoft.com

http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html