CVE-2006-3899

Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary…

published July 27, 2006

CVSS
—
EPSS
24%
Percentile
97.9
In the wild
Unconfirmed
What it is

Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside the SysAllocStringLen function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24274 · 97.9th percentile
Published
2006-07-27T10:00Z
EPSS history
Timeline
  • 27 JUL 10:00Z
    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary…
    cvelistv5