CVE-2006-3442
UnknownEPSS 26.25%
Last modified
CVE-2006-3442 is a vulnerability of currently unknown severity. Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message.. EPSS estimates a 26.25% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Windows Xp | All versions | Sp1 |
References
- http://secunia.com/advisories/21851Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/455516US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-255A.htmlUS Government Resource
- http://secunia.com/advisories/21851Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/455516US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-255A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-3442?
Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message.
How severe is CVE-2006-3442?
Severity scoring for CVE-2006-3442 is pending analysis. The EPSS model estimates a 26.25% probability of exploitation in the next 30 days.
How do I fix CVE-2006-3442?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-3436Cross-site scripting (XSS) vulnerability in Microsoft .NET F…
- CVE-2006-3437Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2006-3438Unspecified vulnerability in Microsoft Hyperlink Object Libr…
- CVE-2006-3439Buffer overflow in the Server Service in Microsoft Windows 2…
- CVE-2006-3440Buffer overflow in the Winsock API in Microsoft Windows 2000…
- CVE-2006-3441Buffer overflow in the DNS Client service in Microsoft Windo…
- CVE-2006-3443Untrusted search path vulnerability in Winlogon in Microsoft…
- CVE-2006-3444Unspecified vulnerability in the kernel in Microsoft Windows…
- CVE-2006-3445Integer overflow in the ReadWideString function in agentdpv.…
- CVE-2006-3446Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2006-3447Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2006-3448Buffer overflow in the Step-by-Step Interactive Training in …
Are you affected by CVE-2006-3442?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
