CVE-2006-0032

Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto…

published September 12, 2006

CVSS

—

EPSS

25%

Percentile

97.9

In the wild

Unconfirmed

What it is

Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.24566 · 97.9th percentile
Published: 2006-09-12T23:00Z

EPSS history

Timeline

12 SEP 23:00Z
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto…
cvelistv5