CVE-2006-3281 Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename tha...
MediumCVSS 5.1
EPSS 48.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the CLSID Key identifier for HTML Applications (HTA), aka "Folder GUID Code Execution Vulnerability." NOTE: directory traversal sequences were used in the original exploit, although their role is not clear.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20060627 IE_ONE_MINOR_ONE_MAJOR mailing-list
- lists.grok.org.uk exploit
- 20825 third-party-advisory vendor-advisory
- 1016388 vdb-entry
- VU#655100 third-party-advisory us-government-resource
- 19389 vdb-entry
- TA06-220A third-party-advisory us-government-resource
- ADV-2006-2553 vdb-entry vendor-advisory
- MS06-045 vendor-advisory
- ie-hta-fileshare-command-execution(27456) vdb-entry
- oval:org.mitre.oval:def:318 signature vdb-entry