CVE-2006-3638
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.713 High
EPSS
Percentile
98.1%
Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka “COM Object Instantiation Memory Corruption Vulnerability.”
Affected configurations
References
secunia.com/advisories/21396
securitytracker.com/id?1016663
www.kb.cert.org/vuls/id/959049
www.osvdb.org/27852
www.securityfocus.com/archive/1/442728/100/0/threaded
www.securityfocus.com/bid/19340
www.tippingpoint.com/security/advisories/TSRT-06-09.html
www.us-cert.gov/cas/techalerts/TA06-220A.html
www.vupen.com/english/advisories/2006/3212
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A719
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.713 High
EPSS
Percentile
98.1%