Vulnerability Name: | CVE-2006-3657 (CCN-27762) | ||||||||
Assigned: | 2006-07-16 | ||||||||
Published: | 2006-07-16 | ||||||||
Updated: | 2021-07-23 | ||||||||
Summary: | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property. | ||||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UC)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UC)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Denial of Service | ||||||||
References: | Source: CCN Type: Full-Disclosure Mailing List, Mon Nov 19 2007 - 16:30:32 CST Multiple stack-based buffer overflows in dxmsft.dll Source: MISC Type: UNKNOWN http://browserfun.blogspot.com/2006/07/mobb-17-dximagetransformmicrosoftgradi.html Source: CCN Type: Browser Fun Blog Sunday, July 16, 2006 MoBB #17: Gradient StartColorStr Source: MITRE Type: CNA CVE-2006-3657 Source: OSVDB Type: UNKNOWN 27109 Source: CCN Type: OSVDB ID: 27109 Microsoft IE DXImageTransform.Microsoft.Gradient Multiple Property Overflow Source: BID Type: UNKNOWN 19029 Source: CCN Type: BID-19029 Microsoft Internet Explorer DXImageTransform Properties Denial Of Service Vulnerability Source: VUPEN Type: UNKNOWN ADV-2006-2832 Source: XF Type: UNKNOWN ie-dximagetransform-dos(27762) Source: XF Type: UNKNOWN ie-dximagetransform-dos(27762) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
BACK |