CVE-2006-3638
Last modified
CVE-2006-3638 is a vulnerability of currently unknown severity. Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability.". EPSS estimates a 34.99% chance of exploitation in the next 30 days.
Description
Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Ie | 6.0 | Sp1 |
| Microsoft | Internet Explorer | 5.0.1 | — |
| Microsoft | Internet Explorer | 6.0 | — |
References
- http://secunia.com/advisories/21396Vendor Advisory
- http://www.kb.cert.org/vuls/id/959049US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-220A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/3212Vendor Advisory
- http://secunia.com/advisories/21396Vendor Advisory
- http://www.kb.cert.org/vuls/id/959049US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-220A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/3212Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-3638?
How severe is CVE-2006-3638?
How do I fix CVE-2006-3638?
Are you affected by CVE-2006-3638?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST