CVEvulnerability
CVE-2006-3357
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-07-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
Affected configurations
• microsoft internet explorer 6.0
References
- http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html browserfun.blogspot.com
- http://secunia.com/advisories/20906 Vendor Advisory
- http://securitytracker.com/id?1016434 securitytracker.com
- http://www.kb.cert.org/vuls/id/159220 US Government Resource
- http://www.osvdb.org/26835 www.osvdb.org
- http://www.securityfocus.com/archive/1/442733/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18769 Exploit
- http://www.tippingpoint.com/security/advisories/TSRT-06-08.html www.tippingpoint.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/2634 www.vupen.com
- http://www.vupen.com/english/advisories/2006/2635 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27573 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13 oval.cisecurity.org
- http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html browserfun.blogspot.com
- http://secunia.com/advisories/20906 Vendor Advisory
- http://securitytracker.com/id?1016434 securitytracker.com
- http://www.kb.cert.org/vuls/id/159220 US Government Resource
- http://www.osvdb.org/26835 www.osvdb.org
- http://www.securityfocus.com/archive/1/442733/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18769 Exploit
- http://www.tippingpoint.com/security/advisories/TSRT-06-08.html www.tippingpoint.com
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/2634 www.vupen.com
- http://www.vupen.com/english/advisories/2006/2635 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27573 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13 oval.cisecurity.org