CVE-2006-3729: Integer Overflow
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3729?
CVE-2006-3729 has a severity rating that indicates it allows for denial of service attacks.
How do I fix CVE-2006-3729?
Fixing CVE-2006-3729 typically involves upgrading to a version of Internet Explorer that is not affected by this vulnerability.
What software is affected by CVE-2006-3729?
CVE-2006-3729 affects Internet Explorer 6.0, including versions 6.0 SP1 and 6.0 SP2 on Windows XP SP2.
What type of attack exploits CVE-2006-3729?
CVE-2006-3729 can be exploited to cause a denial of service, leading to crashes of the affected Internet Explorer application.
Is there a workaround for CVE-2006-3729?
As of now, the recommended workaround for CVE-2006-3729 is to not use the vulnerable version of Internet Explorer.