CVE-2006-3730: Code Injection
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3730?
CVE-2006-3730 has a moderate severity rating due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2006-3730?
To fix CVE-2006-3730, users should upgrade Microsoft Internet Explorer to a version that is not affected by this vulnerability.
Which versions of Internet Explorer are affected by CVE-2006-3730?
CVE-2006-3730 primarily affects Microsoft Internet Explorer 6.0 SP1 and earlier versions.
Can CVE-2006-3730 be exploited remotely?
Yes, CVE-2006-3730 can be exploited remotely, allowing attackers to affect users who visit a compromised website.
What operating system is impacted by CVE-2006-3730?
CVE-2006-3730 impacts Microsoft Windows XP SP2 when running Internet Explorer 6.