CVE-2006-3357

🗓️ 06 Jul 2006 20:00:00Reported by mitreType

Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code

Reporter	Title	Published	Views	Family All 7
Check Point Advisories	Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)	4 Mar 201000:00	–	checkpoint_advisories
Cvelist	CVE-2006-3357	6 Jul 200620:00	–	cvelist
NVD	CVE-2006-3357	6 Jul 200620:05	–	nvd
securityvulns	Microsoft Security Bulletin MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution (922616)	8 Aug 200600:00	–	securityvulns
securityvulns	[Full-disclosure] TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability	9 Aug 200600:00	–	securityvulns
Tenable Nessus	MS06-046: Vulnerability in HTML Help Could Allow Remote Code Execution (922616)	8 Aug 200600:00	–	nessus
CERT	Microsoft Internet Explorer vulnerable to heap overflow via the HTML Help Control "Image" property	7 Jul 200600:00	–	cert

NVD

Node

microsoft internet_explorerMatch6.0

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/27573
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046
kb	www.kb.cert.org/vuls/id/159220
securitytracker	www.securitytracker.com/id
tippingpoint	www.tippingpoint.com/security/advisories/TSRT-06-08.html
browserfun	www.browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html
securityfocus	www.securityfocus.com/bid/18769
secunia	www.secunia.com/advisories/20906
osvdb	www.osvdb.org/26835
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13

16 Apr 2026 00:27Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

EPSS0.661