CVE-2006-0012
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
- Record
CVE-2006-0012- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
- Record
CVE-2006-0012- Updated
- 2026-11-02
EUVDEUVD-2006-0020 No score
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
- Record
EUVD-2006-0020- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qjq-px2f-x2q2 No score
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...
Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
- Record
GHSA-2qjq-px2f-x2q2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0012 is a medium vulnerability (CVSS 5.1) in Microsoft Windows 2000, published April 12, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 24.8%, the 97th percentile. No source names a fixed version.
References
securityfocus.com/bid/17464
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1743
secunia.com/advisories/19606
us-cert.gov/cas/techalerts/TA06-101A.html
exchange.xforce.ibmcloud.com/vulnerabilities/25554
securitytracker.com/id?1015897
Show 10 moreShow less
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
osvdb.org/24516
kb.cert.org/vuls/id/641460
vupen.com/english/advisories/2006/1320
nvd.nist.gov/vuln/detail/CVE-2006-0012
github.com/advisories/GHSA-2qjq-px2f-x2q2