Internet Explorer RDSDataControlURL DoS - Ver2 (CVE-2006-3510)

A denial-of-service vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2006-3510

CVE-2006-3510 affects Microsoft Internet Explorer 6 on Windows 2000, where the Remote Data Service Object (RDS.DataControl) can crash a system. The vulnerability stems from an invalid length calculation in operations using SysAllocStringLen, which then triggers a buffer over-read. The described i...