PT-2006-4249 · Microsoft · Internet Explorer+2
Cody Pierce
·
Publicado
2006-07-06
·
Atualizado
2021-07-23
·
CVE-2006-3357
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer 6.0
Description
A heap-based buffer overflow issue exists in the HTML Help ActiveX control, allowing remote attackers to cause a denial of service or possibly execute arbitrary code. This can be achieved by repeatedly setting the
Image field of an Internet.HHCtrl.1 object to certain values. The issue may be related to improper escaping and long strings. An attacker could exploit this by constructing a malicious web page, potentially allowing remote code execution if a user visits the page, and could take complete control of the affected system.Recommendations
For Microsoft Internet Explorer 6.0, consider disabling the HTML Help ActiveX control until a patch is available to prevent potential exploitation. Restrict access to malicious web pages to minimize the risk of remote code execution.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Html Help Activex Control
Internet Explorer
Windows