CVE-2006-3944

published 2006-07-31

CVE-2006-3944: Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1…

medium 5 CVSS 3.1

AV N AC L Au N C N I N A P

EXPLOIT

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow exception, or to (b) 0x7ffffffe, which triggers a null dereference.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	ie	—	—