CVE-2006-3209

The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-06-24

Last modified

2024-08-07

Affected products

• Windows Xp (Microsoft)

References

• http://securityreason.com/securityalert/1137
• http://www.securityfocus.com/archive/1/436810/100/200/threaded
• http://www.securityfocus.com/archive/1/436884/100/200/threaded