CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824…

published August 23, 2006

CVSS

—

EPSS

44%

Percentile

98.7

In the wild

Unconfirmed

What it is

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.43691 · 98.7th percentile
Published: 2006-08-23T01:00Z

EPSS history

Timeline

23 AUG 01:00Z
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824…
cvelistv5