CVE-2006-2373: microsoft windows_2000
Vulnerability summary
CVE-2006-2373 is a high (CVSS 10.0) vulnerability in microsoft windows_2000. EPSS estimates a 29.17% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 13-06-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
29.17%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 29.17% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundMicrosoft Windows - NtClose DeadLock (MS06-030)
Maturity: weaponized
Microsoft Windows XP/2000 - 'Mrxsmb.sys' Local Privilege Escalation (MS06-030)
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft3 products
1 vendor · 3 products
References
14 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1942VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.idefense.com/intelligence/vulnerabilities/display.php?id=408Third Party AdvisoryX Refsource IDEFENSE
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1730VDB EntrySignatureX Refsource OVALThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1137VDB EntrySignatureX Refsource OVALThird Party Advisory
- docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-030Vendor AdvisoryX Refsource MSPatch
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2007VDB EntrySignatureX Refsource OVALThird Party Advisory
Show all 14 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1792VDB EntrySignatureX Refsource OVALThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1904VDB EntrySignatureX Refsource OVALThird Party Advisory