Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.
References
Link | Resource |
---|---|
http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html | Broken Link |
http://www.osvdb.org/26839 | Broken Link |
http://www.securityfocus.com/bid/18855 | Exploit Third Party Advisory VDB Entry |
http://www.vupen.com/english/advisories/2006/2687 | Not Applicable |
https://exchange.xforce.ibmcloud.com/vulnerabilities/27565 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
13 Dec 2021, 18:37
Type | Values Removed | Values Added |
---|---|---|
References | (OSVDB) http://www.osvdb.org/26839 - Broken Link | |
References | (BID) http://www.securityfocus.com/bid/18855 - Exploit, Third Party Advisory, VDB Entry | |
References | (MISC) http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html - Broken Link | |
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/27565 - Third Party Advisory, VDB Entry | |
References | (VUPEN) http://www.vupen.com/english/advisories/2006/2687 - Not Applicable | |
CPE | cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:* |
cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:* |
23 Jul 2021, 12:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:* |
Information
Published : 2006-07-07 00:05
Updated : 2024-02-04 16:52
NVD link : CVE-2006-3427
Mitre link : CVE-2006-3427
CVE.ORG link : CVE-2006-3427
JSON object : View
Products Affected
microsoft
- internet_explorer
CWE