Published: 12/09/2006 Updated: 30/04/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote malicious users to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2003 server datacenter_edition
microsoft windows 2003 server enterprise_edition_itanium
microsoft windows 2003 server standard_64-bit
microsoft windows 2003 server web
microsoft windows xp
microsoft windows 2000
microsoft windows 2003 server datacenter_edition_itanium
microsoft windows 2003 server r2
microsoft windows 2003 server enterprise_64-bit
microsoft windows 2003 server sp1
microsoft windows 2003 server standard
microsoft windows 2000 resource_kit
microsoft windows 2003 server enterprise_edition

source: wwwsecurityfocuscom/bid/19927/info Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other users An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting us ...

CWE-79 http://www.securityfocus.com/bid/19927 http://secunia.com/advisories/21861 http://www.us-cert.gov/cas/techalerts/TA06-255A.html http://www.kb.cert.org/vuls/id/108884 http://securitytracker.com/id?1016826 http://www.geocities.jp/ptrs_sec/advisory09e.html http://www.vupen.com/english/advisories/2006/3564 https://exchange.xforce.ibmcloud.com/vulnerabilities/28651 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A535 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-053 http://www.securityfocus.com/archive/1/447511/100/0/threaded http://www.securityfocus.com/archive/1/447509/100/0/threaded http://www.securityfocus.com/archive/1/446630/100/100/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/28500/https://www.kb.cert.org/vuls/id/108884

CVE-2006-0032

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect