CVE-2006-0013
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and...
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
- Record
CVE-2006-0013- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
- Record
CVE-2006-0013- Updated
- 2026-11-02
EUVDEUVD-2006-0021 No score
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
- Record
EUVD-2006-0021- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-36gj-cq6j-2grp No score
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and...
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.
- Record
GHSA-36gj-cq6j-2grp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0013 is a medium vulnerability (CVSS 6.5) in Microsoft Windows Xp, published February 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 34.9%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1547
vupen.com/english/advisories/2006/0577
securityfocus.com/bid/16636
exchange.xforce.ibmcloud.com/vulnerabilities/24491
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-008
Show 8 moreShow less
kb.cert.org/vuls/id/388900
securitytracker.com/id?1015630
secunia.com/advisories/18857
nvd.nist.gov/vuln/detail/CVE-2006-0013
github.com/advisories/GHSA-36gj-cq6j-2grp