CVE-2006-3898
published 2006-07-27CVE-2006-3898: Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the…
PriorityP417medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
24.27%
97.6th percentile
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 ActiveX object before initializing the URL, which triggers a null dereference.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_explorer | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.htmlhttp://www.osvdb.org/27231http://www.securityfocus.com/bid/19109http://www.vupen.com/english/advisories/2006/2952https://exchange.xforce.ibmcloud.com/vulnerabilities/27929http://browserfun.blogspot.com/2006/07/mobb-22-internethhctrl-click.htmlhttp://www.osvdb.org/27231http://www.securityfocus.com/bid/19109http://www.vupen.com/english/advisories/2006/2952https://exchange.xforce.ibmcloud.com/vulnerabilities/27929
2006-07-27
Published