CVE-2006-6723: Microsoft Windows 2000

High severity, CVSS 7.8. EPSS: 37.2% chance of exploitation in the next 30 days.

The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2006-12-26. Last modified 2026-06-16.