CVE-2006-6753 - Vulnerability Details - OpenCVE

Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00629.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	Windows Event Viewer

Configuration 1 [-]

cpe:2.3:a:microsoft:windows_event_viewer:*:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://www.securityfocus.com/archive/1/455044/100/0/threaded
http://www.securityfocus.com/archive/1/455071/100/0/threaded
http://www.securityfocus.com/archive/1/455077/100/0/threaded
http://www.securityfocus.com/archive/1/455079/100/0/threaded
http://www.securityfocus.com/archive/1/455087/100/0/threaded

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-12-27T01:00:00

Updated: 2024-08-07T20:42:06.547Z

Reserved: 2006-12-26T00:00:00

Link: CVE-2006-6753

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-12-27T01:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2006-6753

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-12-21T00:00:00", "descriptions": [{"lang": "en", "value": "Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20061221 Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/455071/100/0/threaded"}, {"name": "20061221 RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/455087/100/0/threaded"}, {"name": "20061221 Re: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/455077/100/0/threaded"}, {"name": "20061221 Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/455044/100/0/threaded"}, {"name": "20061221 RE: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/455079/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-6753", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20061221 Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/455071/100/0/threaded"}, {"name": "20061221 RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/455087/100/0/threaded"}, {"name": "20061221 Re: [Full-disclosure] Fun with event logs (semi-offtopic)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/455077/100/0/threaded"}, {"name": "20061221 Fun with event logs (semi-offtopic)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/455044/100/0/threaded"}, {"name": "20061221 RE: [Full-disclosure] Fun with event logs (semi-offtopic)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/455079/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:42:06.547Z"}, "title": "CVE Program Container", "references": [{"name": "20061221 Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/455071/100/0/threaded"}, {"name": "20061221 RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/455087/100/0/threaded"}, {"name": "20061221 Re: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/455077/100/0/threaded"}, {"name": "20061221 Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/455044/100/0/threaded"}, {"name": "20061221 RE: [Full-disclosure] Fun with event logs (semi-offtopic)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/455079/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6753", "datePublished": "2006-12-27T01:00:00", "dateReserved": "2006-12-26T00:00:00", "dateUpdated": "2024-08-07T20:42:06.547Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:windows_event_viewer:*:*:*:*:*:*:*:*", "matchCriteriaId": "03B7EB3D-6451-4084-A9E6-2D797CB94E38", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer."}, {"lang": "es", "value": "el Visor de Sucesos (eventvwr.exe) en Microsoft Windows no muestra adecuadamente la informaci\u00f3n de registro almacenada que contiene caracteres '%' (porcentaje), lo cual podr\u00eda hacer imposible utilizar el Visor de Sucesos para determinar los datos reales que dispararon un evento, y podr\u00eda producir cadenas largas que no son manejadas adecuadamente por determinados procesos que se basan en el Visor de Sucesos."}], "id": "CVE-2006-6753", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:S/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 5.1, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-12-27T01:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/455044/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/455071/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/455077/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/455079/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/455087/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/455044/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/455071/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/455077/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/455079/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/455087/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}