CVE-2006-3357

high · 7.5

Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.

7.5

CVSS

35.3%

EPSS (exploit prob.)

98th

EPSS percentile

2006-07-06

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	6.0

Check a specific version with /api/v1/cve/match.

References

http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html
http://secunia.com/advisories/20906
http://securitytracker.com/id?1016434
http://www.kb.cert.org/vuls/id/159220
http://www.osvdb.org/26835
http://www.securityfocus.com/archive/1/442733/100/0/threaded
http://www.securityfocus.com/bid/18769
http://www.tippingpoint.com/security/advisories/TSRT-06-08.html
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
http://www.vupen.com/english/advisories/2006/2634
http://www.vupen.com/english/advisories/2006/2635
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046
https://exchange.xforce.ibmcloud.com/vulnerabilities/27573
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13
http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html
http://secunia.com/advisories/20906
http://securitytracker.com/id?1016434
http://www.kb.cert.org/vuls/id/159220
http://www.osvdb.org/26835
http://www.securityfocus.com/archive/1/442733/100/0/threaded
http://www.securityfocus.com/bid/18769
http://www.tippingpoint.com/security/advisories/TSRT-06-08.html
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
http://www.vupen.com/english/advisories/2006/2634
http://www.vupen.com/english/advisories/2006/2635

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-3357