PT-2006-4510 · Microsoft · Directanimation.Datuple+1

Cody Pierce + 1 · Publicado 2006-08-08 · Atualizado 2021-07-23 · CVE-2006-3638

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description The issue arises from the improper handling of uninitialized COM objects, which can lead to memory corruption and potentially allow the execution of arbitrary code. This can be exploited through a specially crafted web page, potentially enabling an attacker to take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider disabling the instantiation of COM objects not intended for use in Internet Explorer as a temporary workaround until a patch is available. Restrict access to potentially vulnerable ActiveX controls, such as DirectAnimation.DATuple, to minimize the risk of exploitation.

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-3638

Produtos afetados

Directanimation.Datuple

Internet Explorer

Referências · 17

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3638 · Nota de Segurança
• http://securityfocus.com/archive/1/442728/100/0/threaded · Nota
• http://securityfocus.com/archive/1/archive/1/442728/100/0/threaded · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:719 · Nota
• http://securitytracker.com/id?1016663 · Nota
• http://frsirt.com/english/advisories/2006/3212 · Nota
• http://securityfocus.com/bid/19340 · Nota
• http://tippingpoint.com/security/advisories/TSRT-06-09.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A719 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 · Aviso do Fabricante
• http://secunia.com/advisories/21396 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3638 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-220A.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-042 · Nota
• http://vupen.com/english/advisories/2006/3212 · Aviso do Fabricante