CVE

Id
23310  
CVE No.
CVE-2006-7206  
Status
Candidate  
Description
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString function, a different issue than CVE-2006-3510 and CVE-2006-3899.  
Phase
Assigned (20070621)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
224328 23310 CVE-2006-7206 MISC:http://browserfun.blogspot.com/2006/07/mobb-29-adodbrecordset-nextrecordset.html  View
224329 23310 CVE-2006-7206 BID:19227  View
224330 23310 CVE-2006-7206 URL:http://www.securityfocus.com/bid/19227  View
224331 23310 CVE-2006-7206 OSVDB:27532  View
224332 23310 CVE-2006-7206 URL:http://www.osvdb.org/27532  View
224333 23310 CVE-2006-7206 XF:ie-adodbrecordset-dos(28066)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52613 JVNDB-2007-001305 Mambo のAdam van Dongen Forum (com_forum) コンポーネントの download.php における任意の PHP コードが実行される脆弱性 Mambo のAdam van Dongen Forum (com_forum) コンポーネントの download.php には、任意の PHP コードが実行される脆弱性が存在します。 CVE-2006-7208 23310 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001305.html  View