CVE-2006-5266 Memory corruption in n/a
Remote attackers can execute arbitrary code via buffer overflows in Microsoft Dynamics GP's Distributed Process Manager and Server components.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-5266?
CVE-2006-5266 is a high-severity memory corruption vulnerability in n/a, published on 30 Jun 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message to the (a) DPM component, or a (2) long string or (3) long IP address in a Distributed Process Server (DPS) message to the DPM or (b) DPS component.
Weakness: CWE-119
Which versions are affected by CVE-2006-5266?
It affects 1 product.
Products include Microsoft Dynamics Gp.
How do I fix CVE-2006-5266?
No fix has been published for CVE-2006-5266 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-5266 being exploited?
There is no known exploitation of CVE-2006-5266 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2022-23274 Microsoft Dynamics GP Remote Code Execution Vulnerability
- CVE-2022-23272 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
- CVE-2022-23273 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
- CVE-2022-23271 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
- CVE-2022-23269 Microsoft Dynamics GP Spoofing Vulnerability
Sources
Also known as GHSA-rxxg-c666-q7v4.