Back
CVE-2006-0013
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
Published: Feb 14, 2006
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (18)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_2003_server | datacenter_64-bit |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard_64-bit |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_xp | * |
| microsoft | windows_xp | * |
| microsoft | windows_xp | * |
| microsoft | windows_xp | * |
| microsoft | windows_xp | * |
GitHub Security Advisory GHSA-36gj-cq6j-2grp
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and...
References (24)
- http://secunia.com/advisories/18857 Patch, Vendor Advisory
- http://securitytracker.com/id?1015630 Patch
- http://www.kb.cert.org/vuls/id/388900 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/16636 Patch
- http://www.vupen.com/english/advisories/2006/0577
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24491
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1220
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1602
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A683
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A716
- http://secunia.com/advisories/18857 Patch, Vendor Advisory
- http://securitytracker.com/id?1015630 Patch
- http://www.kb.cert.org/vuls/id/388900 Third Party Advisory, US Government Resource
Risk Scores
CVSS Score
6.5 / 10
EPSS Score
34.85%
Top 2% most likely to be exploited
Threat Score
36.5 / 100
Data Sources
NVD
EPSS
GitHub