7.5

CVE-2006-3357

Exploit
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Internet Explorer Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 35.27% 0.982
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
US Government Resource
http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html
http://secunia.com/advisories/20906
Vendor Advisory
http://securitytracker.com/id?1016434
http://www.kb.cert.org/vuls/id/159220
US Government Resource
http://www.osvdb.org/26835
http://www.securityfocus.com/archive/1/442733/100/0/threaded
http://www.securityfocus.com/bid/18769
Exploit
http://www.tippingpoint.com/security/advisories/TSRT-06-08.html
http://www.vupen.com/english/advisories/2006/2634
http://www.vupen.com/english/advisories/2006/2635
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046
https://exchange.xforce.ibmcloud.com/vulnerabilities/27573
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13