high8.8Public exploit code
CVE-2006-3730
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)2010-07-03 · remote · windows · Verified
- Microsoft Internet Explorer - WebViewFolderIcon setSlice() (2)2006-09-29 · remote · windows · Verified
- Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)2006-09-29 · remote · windows · Verified
- Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)2006-09-28 · remote · windows · Verified
- Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)2006-09-27 · remote · windows · Verified
Impact
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html
- http://isc.sans.org/diary.php?storyid=1742
- http://riosec.com/msie-setslice-vuln
- http://secunia.com/advisories/22159
- http://securitytracker.com/id?1016941
- http://www.kb.cert.org/vuls/id/753044
- http://www.osvdb.org/27110
- http://www.securityfocus.com/archive/1/447174/100/0/threaded
- http://www.securityfocus.com/archive/1/447383/100/100/threaded
- http://www.securityfocus.com/archive/1/447426/100/0/threaded
- http://www.securityfocus.com/archive/1/447490/100/0/threaded
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/19030
- http://www.us-cert.gov/cas/techalerts/TA06-270A.html
- http://www.us-cert.gov/cas/techalerts/TA06-283A.html
- http://www.vupen.com/english/advisories/2006/2882
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-057
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27804
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A339
- https://www.exploit-db.com/exploits/2440
- http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html
- http://isc.sans.org/diary.php?storyid=1742
- http://riosec.com/msie-setslice-vuln
- http://secunia.com/advisories/22159
- http://securitytracker.com/id?1016941