CVE-2006-3357

Published: Jul 6, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.

Affected (1)

Products: Microsoft: Internet Explorer

1 product

Internet Explorer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6.0

References (28)

http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html

Source: cve@mitre.org

http://secunia.com/advisories/20906

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016434

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/159220

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/26835

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/442733/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18769

Source: cve@mitre.org

Exploit

http://www.tippingpoint.com/security/advisories/TSRT-06-08.html

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/2634

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2635

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27573

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13

Source: cve@mitre.org

http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20906

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016434

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/159220

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/26835

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/442733/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18769

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.tippingpoint.com/security/advisories/TSRT-06-08.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/2634

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2635

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27573

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.