CVE-2006-3897

Published: Jul 27, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.

Affected (3)

Products: Microsoft: Internet Explorer

Microsoft

1 product

Internet Explorer

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6.0
Microsoft Internet Explorer	Version 6.0 sp1
Microsoft Internet Explorer	Version 6.0 sp2

Running on/with	Platform Versions
Microsoft Windows 2000	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (10)

http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/27232

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/19114

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2006/2953

Source: cve@mitre.org

Not Applicable

https://exchange.xforce.ibmcloud.com/vulnerabilities/27930

Source: cve@mitre.org

VDB Entry

http://browserfun.blogspot.com/2006/07/mobb-23-nmsaasfsourcemediadescription.html