Lucene search

[email protected]CVE-2006-3873

HistorySep 12, 2006 - 11:07 p.m.

CVE-2006-3873

2006-09-1223:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3873

urlmon.dll

microsoft internet explorer 6

buffer overflow

denial of service

arbitrary code

nvd

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.15 Low

EPSS

Percentile

95.8%

JSON

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.

CPENameOperatorVersion
microsoft:iemicrosoft ieeq6.0
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqitanium
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp1
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2000microsoft windows 2000eq*

CPE	Name	Operator	Version
microsoft:ie	microsoft ie	eq	6.0
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	itanium
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp1
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2000	microsoft windows 2000	eq	*

References

research.eeye.com/html/advisories/published/AD20060912.html

securityreason.com/securityalert/1555

securitytracker.com/id?1016839

weblog.infoworld.com/techwatch/archives/007870.html

www.osvdb.org/30834

www.securityfocus.com/archive/1/445835/100/0/threaded

www.securityfocus.com/bid/19987

docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042

exchange.xforce.ibmcloud.com/vulnerabilities/28893

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.15 Low

EPSS

Percentile

95.8%

JSON

Related for CVE-2006-3873

checkpoint_advisories1 securityvulns2 cve1 cert1 nessus1