medium5.0Public exploit code
CVE-2006-3897
Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.AS…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow2006-07-24 · dos · windows · Verified
Impact
Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html
- http://www.osvdb.org/27232
- http://www.securityfocus.com/bid/19114
- http://www.vupen.com/english/advisories/2006/2953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27930
- http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html
- http://www.osvdb.org/27232
- http://www.securityfocus.com/bid/19114
- http://www.vupen.com/english/advisories/2006/2953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27930