CVE-2006-1314
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4,...
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
- Record
CVE-2006-1314- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
- Record
CVE-2006-1314- Updated
- 2026-11-02
EUVDEUVD-2006-1318 No score
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
- Record
EUVD-2006-1318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-82jr-5c3r-3vqp No score
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4,...
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
- Record
GHSA-82jr-5c3r-3vqp- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035) | 2006-07-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1314 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2000, published July 11, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.2%, the 99th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/189140
vupen.com/english/advisories/2006/2753
exchange.xforce.ibmcloud.com/vulnerabilities/26818
osvdb.org/27154
secunia.com/advisories/21007
securityreason.com/securityalert/1212
Show 8 moreShow less
tippingpoint.com/security/advisories/TSRT-06-02.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A600
securityfocus.com/bid/18863
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035
us-cert.gov/cas/techalerts/TA06-192A.html
nvd.nist.gov/vuln/detail/CVE-2006-1314
github.com/advisories/GHSA-82jr-5c3r-3vqp