CVE-2006-3357
Last modified
CVE-2006-3357 is a vulnerability of currently unknown severity. Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.. EPSS estimates a 35.27% chance of exploitation in the next 30 days.
Description
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | 6.0 |
References
- http://secunia.com/advisories/20906Vendor Advisory
- http://www.kb.cert.org/vuls/id/159220US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-220A.htmlUS Government Resource
- http://secunia.com/advisories/20906Vendor Advisory
- http://www.kb.cert.org/vuls/id/159220US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-220A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-3357?
How severe is CVE-2006-3357?
How do I fix CVE-2006-3357?
Are you affected by CVE-2006-3357?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST