CVE-2006-3659: Medium severity Microsoft Internet Explorer vulnerability
Published Jul 17, 2006
·Updated
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object.
Affected Software
2 affected components
Microsoft Internet Explorer=6-sp1
Microsoft ie=6-windows_server_2003_sp1
Event History
Jul 17, 2006
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3659?
The severity of CVE-2006-3659 is classified as a denial of service vulnerability.
2
How do I fix CVE-2006-3659?
To mitigate CVE-2006-3659, users should upgrade to a newer version of Internet Explorer that does not include this vulnerability.
3
What versions of Internet Explorer are affected by CVE-2006-3659?
CVE-2006-3659 affects Microsoft Internet Explorer 6 Service Pack 1 and Windows Server 2003 Service Pack 1.
4
What is the impact of CVE-2006-3659?
The impact of CVE-2006-3659 is the potential for remote attackers to crash the browser and disrupt user activities.
5
Is there a patch available for CVE-2006-3659?
Microsoft has not provided a patch for CVE-2006-3659, but upgrading to a supported version of Internet Explorer is recommended.