Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-3730
HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3730

2006-07-2114:03:00
CWE-94
mitre
web.nvd.nist.gov
69
cve-2006-3730
internet explorer
windows xp
sp2
integer overflow
denial of service
remote attackers
arbitrary code
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.973

Percentile

99.9%

JSON

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

Affected configurations

Nvd
Node
microsoftieMatch6.0sp1
OR
microsoftinternet_explorerMatch6.0
AND
microsoftwindows_xpsp2
VendorProductVersionCPE
microsoftinternet_explorer6.0cpe:/a:microsoft:internet_explorer:6.0:::
microsoftie6.0cpe:/a:microsoft:ie:6.0:sp1::

References

Related

packetstorm 1
canvas 1
nvd 1
checkpoint_advisories 3
securityvulns 2
saint 4
metasploit 1
cert 1
cvelist 1
nessus 1
exploitdb 1
thn 1
packetstorm
packetstorm
Internet Explorer WebViewFolderIcon setSlice() Overflow
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: MS06_057
2006-07-21 14:03:00
nvd
nvd
CVE-2006-3730
2006-07-21 14:03:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer WebViewFolderIcon ActiveX Integer Overflow - Ver2 (CVE-2006-3730)
2014-03-03 00:00:00
Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)
2006-10-18 00:00:00
Internet Explorer SetSlice Method Buffer Overflow (MS06-057; CVE-2006-3730)
2006-10-18 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)
2006-10-11 00:00:00
US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability
2006-09-28 00:00:00
saint
saint
Internet Explorer WebViewFolderIcon setSlice integer overflow
2006-09-29 00:00:00
Internet Explorer WebViewFolderIcon setSlice integer overflow
2006-09-29 00:00:00
Internet Explorer WebViewFolderIcon setSlice integer overflow
2006-09-29 00:00:00
metasploit
metasploit
MS06-057 Microsoft Internet Explorer WebViewFolderIcon setSlice() Overflow
2006-12-17 02:37:45
cert
cert
Microsoft Windows WebViewFolderIcon ActiveX integer overflow
2006-09-27 00:00:00
cvelist
cvelist
CVE-2006-3730
2006-07-19 23:00:00
nessus
nessus
MS06-057: Vulnerability in Windows Explorer Could Allow Remote Execution (923191)
2006-10-10 00:00:00
exploitdb
exploitdb
Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)
2010-07-03 00:00:00
thn
thn
Researchers caught espionage malware mastermind on webcam
2012-10-30 20:02:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.973

Percentile

99.9%

JSON
Related for CVE-2006-3730
packetstorm1canvas1nvd1checkpoint_advisories3securityvulns2saint4metasploit1cert1cvelist1nessus1exploitdb1thn1