NVD

Id
62311  
Name
CVE-2006-3638  
Description
Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-08  
Modified Date
2011-03-07  
Seq
2006-3638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322933 62311 CVE-2006-3638 oval:org.mitre.oval:def:719  View
322934 62311 CVE-2006-3638 1016663  View
322935 62311 CVE-2006-3638 VU#959049  View
322936 62311 CVE-2006-3638 MS06-042  View
322937 62311 CVE-2006-3638 20060808 TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability  View
322938 62311 CVE-2006-3638 19340  View
322939 62311 CVE-2006-3638 http://www.tippingpoint.com/security/advisories/TSRT-06-09.html  View
322940 62311 CVE-2006-3638 TA06-220A  View
322941 62311 CVE-2006-3638 ADV-2006-3212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58287 JVNDB-2006-000483 Microsoft Internet Explorer における COM オブジェクトの処理によるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2006-3638 19740 CVE-2006-3638 62311 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000483.html 2006-08-08 2007-04-01 View