CVE-2006-3840
iss: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- iss:blackice_pc_protection
- iss:blackice_server_protection
- iss:proventia_a_series_xpu
- iss:proventia_desktop
- iss:proventia_g_series_xpu
- iss:proventia_m_series_xpu
- iss:proventia_server
- iss:realsecure_desktop
- iss:realsecure_network
- iss:realsecure_server_sensor