CVE-2006-3873: Buffer Overflow
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3873?
CVE-2006-3873 has a severity rating that can lead to denial of service and the potential execution of arbitrary code.
How do I fix CVE-2006-3873?
To fix CVE-2006-3873, ensure that Microsoft Internet Explorer and affected Windows versions are updated with the latest security patches.
What systems are affected by CVE-2006-3873?
CVE-2006-3873 affects Microsoft Internet Explorer 6 SP1 and various versions of Windows, including Windows 2000, Windows XP, and Windows Server 2003.
What type of vulnerability is CVE-2006-3873?
CVE-2006-3873 is classified as a heap-based buffer overflow vulnerability.
What attack vector is used for CVE-2006-3873?
CVE-2006-3873 can be exploited through specifically crafted GZIP-encoded URLs.