CVE-2006-3351: Microsoft Windows 2003 Server

Medium severity, CVSS 5.4. EPSS: 6.9% chance of exploitation in the next 30 days.

Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.

Affected products

• Microsoft Windows 2003 Server: version 3.1.0.3270 only; version 64-bit only; version datacenter_64-bit only; version datacenter_edition only; version datacenter_edition_64-bit only; version enterprise only; …
• Microsoft Windows XP: any version; version ibm_oem_version only

Published 2006-07-06. Last modified 2026-06-16.