CVE-2006-1313
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003,...
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
- Record
CVE-2006-1313- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
- Record
CVE-2006-1313- Updated
- 2026-11-02
EUVDEUVD-2006-1317 No score
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
- Record
EUVD-2006-1317- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x5cf-h7c6-p7f8 No score
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003,...
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
- Record
GHSA-x5cf-h7c6-p7f8- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1313 is a medium vulnerability (CVSS 6.8) in Microsoft Windows 2000, published June 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 29.3%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
securitytracker.com/id?1016283
exchange.xforce.ibmcloud.com/vulnerabilities/26805
vupen.com/english/advisories/2006/2321
us-cert.gov/cas/techalerts/TA06-164A.html
Show 9 moreShow less
kb.cert.org/vuls/id/390044
osvdb.org/26434
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023
securityfocus.com/bid/18359
secunia.com/advisories/20620
nvd.nist.gov/vuln/detail/CVE-2006-1313
github.com/advisories/GHSA-x5cf-h7c6-p7f8