CVE-2006-3897 Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object....
MediumCVSS 5.0
EPSS 23.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 6.0-sp2 | No fix listed |
References
- browserfun.blogspot.com broken-link
- 27232 broken-link vdb-entry
- 19114 exploit third-party-advisory vdb-entry
- ADV-2006-2953 not-applicable vdb-entry
- ie-asfsourcemediadescription-dispvalue-dos(27930) vdb-entry