CVE-2006-0010
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...
CVE-2006-0010 is a high vulnerability (CVSS 9.3) in Microsoft Windows 2000, published January 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 33.1%, the 98th percentile. No source names a fixed version.
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
- Record
CVE-2006-0010- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
- Record
CVE-2006-0010- Updated
- 2026-11-02
EUVDEUVD-2006-0018 No score
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
- Record
EUVD-2006-0018- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4373-qwqg-vgwm No score
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
- Record
GHSA-4373-qwqg-vgwm- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
seclists.org/fulldisclosure/2006/Jan/363
www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525
kb.cert.org/vuls/id/915930
eeye.com/html/Research/Advisories/EEYEB20050801.html
support.avaya.com/elmodocs2/security/ASA-2006-004.htm
osvdb.org/18829
Show 18 moreShow less
vupen.com/english/advisories/2006/0118
secunia.com/advisories/18391
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-002
exchange.xforce.ibmcloud.com/vulnerabilities/23922
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A698
securitytracker.com/id?1015459
securityfocus.com/archive/1/421885/100/0/threaded
us-cert.gov/cas/techalerts/TA06-010A.html
nvd.nist.gov/vuln/detail/CVE-2006-0010
github.com/advisories/GHSA-4373-qwqg-vgwm