CVE Vulnerabilities

CVE-2006-0008

Published: Feb 14, 2006 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the shell about dialog box and clicking the End-User License Agreement link, which executes Notepad with the privileges of the program that displays the about box.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2003 (including) 2003 (including)
Office Microsoft 2003-sp1 (including) 2003-sp1 (including)
Office Microsoft 2003-sp2 (including) 2003-sp2 (including)

References