CVE-2006-5266

high Microsoft
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
29.2%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: December 31, 2006 (7074 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message to the (a) DPM component, or a (2) long string or (3) long IP address in a Distributed Process Server (DPS) message to the DPM or (b) DPS component.

CWE

CWE-119

Affected Products

microsoft dynamics gp

References

🔗 www.securityfocus.com 🔗 exchange.xforce.ibmcloud.com 🔗 exchange.xforce.ibmcloud.com 🔗 exchange.xforce.ibmcloud.com 🔗 www.securityfocus.com