CVE-2006-5448

The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers "memory corruption" and possibly a buffer overflow.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-10-23

Last modified

2024-08-07

Affected products

• Windows Digital Rights Management (Microsoft)

References

• http://securityreason.com/securityalert/1756
• http://www.securityfocus.com/archive/1/448097/100/200/threaded