CVE-2006-3657: Medium severity Microsoft Internet Explorer vulnerability

Published Jul 17, 2006

Updated

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property.

Affected Software

2 affected components

Microsoft Internet Explorer=6-sp1

Microsoft ie=6-windows_server_2003_sp1

Event History

Jul 17, 2006

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3657?

CVE-2006-3657 is classified as a denial of service vulnerability due to a stack overflow exception.

How do I fix CVE-2006-3657?

To mitigate CVE-2006-3657, it is recommended to upgrade to a later version of Microsoft Internet Explorer or apply any available security patches.

What versions of Internet Explorer are affected by CVE-2006-3657?

CVE-2006-3657 affects Microsoft Internet Explorer 6 SP1 and Internet Explorer 6 on Windows Server 2003 SP1.

Can CVE-2006-3657 be exploited remotely?

Yes, CVE-2006-3657 can be exploited remotely by attackers to trigger a denial of service.

What are the specific properties involved in CVE-2006-3657?

The vulnerability involves the DXImageTransform.Microsoft.Gradient ActiveX object with overly long StartColorStr or EndColorStr properties.