CVE-2006-0032

Published Sep 12, 2006 CVSS 2.0 · 4.3 Medium EPSS 24.6% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Aug 7, 2024, 4:18 PM
Reserved
Nov 30, 2005, 12:00 AM
Status
Modified
Published
Sep 12, 2006, 11:07 PM
Modified
Jun 16, 2026, 10:19 PM