CVE-2006-3445

CVE-2006-3445 describes an integer overflow vulnerability in the ReadWideString function within agentdpv.dll in Microsoft Agent, affecting Windows 2000 SP4, XP SP2, and Server 2003 up to SP1. This flaw allows remote attackers to execute arbitrary code by supplying a large length value in an .ACF file, leading to a heap-based buffer overflow. The vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. Despite its high risk score (FAUCET 98/100) and elevated EPSS, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.