Vulnerability in N/a

CVE-2006-4692

Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with…

EPSS: 0.666 (98.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

29424 (x_refsource_OSVDB, vdb-entry)
SSRT061264 (x_refsource_HP, vendor-advisory)
VU#703936 (x_refsource_CERT-VN, third-party-advisory)
20318 (vdb-entry, x_refsource_BID)
MS06-065 (x_refsource_MS, vendor-advisory)
ADV-2006-3984 (vdb-entry, x_refsource_VUPEN)
secunia.com/secunia_research/2006-54/advisory/ (x_refsource_MISC)
20061014 Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing (mailing-list, x_refsource_BUGTRAQ)
20717 (x_refsource_SECUNIA, third-party-advisory)
oval:org.mitre.oval:def:496 (signature, x_refsource_OVAL, vdb-entry)