Microsoft Internet Explorer HHCtrl ActiveX控件堆溢出漏洞(MS06-046)

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的HTML帮助ActiveX控件（hhctrl.ocx）在处理Image属性时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击者可以通过在恶意网页中多次将属性设置为超长字符串导致堆溢出，如果用户受骗访问了恶意的网页就会导致执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft已经为此发布了一个安全公告（MS06-046）以及相应补丁...

MS06-046: Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

The remote host contains a version of the HTML Help ActiveX control that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...