CVE-2006-3873 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-3873
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3873

Description: Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/28893 ST 1016839 SREASON http://securityreason.com/securityalert/1555 OSVDB 30834 MS http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx MISC http://weblog.infoworld.com/techwatch/archives/007870.html http://research.eeye.com/html/advisories/published/AD20060912.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/445835/100/0/threaded BID 19987

Return to the previous page.