NVD

Id
62035  
Name
CVE-2006-3357  
Description
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-06  
Modified Date
2011-03-07  
Seq
2006-3357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321153 62035 CVE-2006-3357 http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html  View
321154 62035 CVE-2006-3357 oval:org.mitre.oval:def:13  View
321155 62035 CVE-2006-3357 1016434  View
321156 62035 CVE-2006-3357 VU#159220  View
321157 62035 CVE-2006-3357 MS06-046  View
321158 62035 CVE-2006-3357 20060808 TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability  View
321159 62035 CVE-2006-3357 18769  View
321160 62035 CVE-2006-3357 http://www.tippingpoint.com/security/advisories/TSRT-06-08.html  View
321161 62035 CVE-2006-3357 TA06-220A  View
321162 62035 CVE-2006-3357 ADV-2006-2634  View
321163 62035 CVE-2006-3357 ADV-2006-2635  View
321164 62035 CVE-2006-3357 ie-hhctrl-bo(27573)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58169 JVNDB-2006-000365 Microsoft Windows の hhctrl.ocx におけるヒープオーバーフローの脆弱性 Microsoft Windows に含まれる Microsoft Internet Explorer の HTML ヘルプ ActiveX コントロール (hhctrl.ocx) には、Image プロパティを設定する際にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-3357 19459 CVE-2006-3357 62035 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000365.html 2006-07-02 2007-04-01 View