CVE-2006-3944: Integer Overflow

Published Jul 31, 2006

Updated

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow exception, or to (b) 0x7ffffffe, which triggers a null dereference.

Affected Software

1 affected component

Microsoft ie=6-windows_xp_sp2

Event History

Jul 31, 2006

CVE Published

11:04 PM

Aug 1, 2006

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3944?

CVE-2006-3944 has a severity rating that indicates it can cause a denial of service in Microsoft Internet Explorer 6.

How do I fix CVE-2006-3944?

To fix CVE-2006-3944, users should apply the latest updates and patches provided by Microsoft for Internet Explorer 6.

Who is affected by CVE-2006-3944?

CVE-2006-3944 affects users of Microsoft Internet Explorer 6 running on Windows XP SP2.

What impact does CVE-2006-3944 have?

CVE-2006-3944 can lead to application crashes due to integer overflow exceptions caused by manipulated Forms.ListBox.1 objects.

Can CVE-2006-3944 be exploited remotely?

Yes, CVE-2006-3944 can be exploited remotely by attackers to cause a denial of service.