Vulnerability in Microsoft Ie
CVE-2006-3873
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
EPSS: 0.286 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions 64-bit, itanium, r2
- Microsoft Windows_xp
- N/a — versions n/a
References
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_SREASON, third-party-advisory)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (URL Repurposed, Patch, x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)