CVE-2006-0012 json
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to…
published 2006-04-12 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0020
- cvss
- 5.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 24.8%
- EPSS 24.8% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
Patch / fix
- secunia.com/advisories/19606 advisory
Exploit prediction
24.78% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
References
-
secunia.com
/advisories/19606
third-party-advisory, patch, vendor-advisory
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2006/ms06-015
vendor-advisory
-
securityfocus.com
/bid/17464
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743
vdb-entry, signature
-
us-cert.gov
/cas/techalerts/TA06-101A.html
third-party-advisory, us-government-resource
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25554
vdb-entry
-
securitytracker.com
/id?1015897
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1191
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1764
vdb-entry, signature
-
osvdb.org
/24516
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1448
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1679
vdb-entry, signature
-
kb.cert.org
/vuls/id/641460
third-party-advisory, us-government-resource
-
vupen.com
/english/advisories/2006/1320
vdb-entry
Sources
- CVE List CVE-2006-0012
- NVD CVE-2006-0012
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.