deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1467
Published: 2006-06-29
Description: Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://docs.info.apple.com/article.html?artnum=303952; http://secunia.com/advisories/20891; http://securitytracker.com/id?1016413
CVE: CVE-2006-2657
Published: 2006-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3017.  Reason: This candidate is a reservation duplicate of CVE-2006-3017.  Notes: All CVE users should reference CVE-2006-3017 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-3319
Published: 2006-06-30
Description: Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the cal parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-12-php-icalendar.html; http://secunia.com/advisories/20883; http://securityreason.com/securityalert/1175
CVE: CVE-2006-3320
Published: 2006-06-30
Description: Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.
CVSS Score: 2.6 (LOW)
References: http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html; http://secunia.com/advisories/20841; http://secunia.com/advisories/21248
CVE: CVE-2006-3321
Published: 2006-06-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html; http://www.osvdb.org/27623; http://www.securityfocus.com/bid/19266
CVE: CVE-2006-2198
Published: 2006-06-30
Description: OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://fedoranews.org/cms/node/2343; http://secunia.com/advisories/20867; http://secunia.com/advisories/20893
CVE: CVE-2006-2199
Published: 2006-06-30
Description: Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.
CVSS Score: 7.6 (HIGH)
References: http://fedoranews.org/cms/node/2343; http://secunia.com/advisories/20867; http://secunia.com/advisories/20893
CVE: CVE-2006-3117
Published: 2006-06-30
Description: Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://fedoranews.org/cms/node/2343; http://secunia.com/advisories/20867; http://secunia.com/advisories/20893
CVE: CVE-2006-3118
Published: 2006-06-30
Description: spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls.  NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
CVSS Score: 1.2 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617; http://www.securityfocus.com/bid/18675; https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171
CVE: CVE-2006-3322
Published: 2006-06-30
Description: SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20200; http://secunia.com/secunia_research/2006-47/advisory/; http://securityreason.com/securityalert/1173
CVE: CVE-2006-2934
Published: 2006-06-30
Description: SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/20917; http://secunia.com/advisories/20986; http://secunia.com/advisories/21179
CVE: CVE-2006-3323
Published: 2006-06-30
Description: PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter.  NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.
CVSS Score: 7.5 (HIGH)
References: http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html; http://secunia.com/advisories/20847; http://securityreason.com/securityalert/1172
CVE: CVE-2006-3324
Published: 2006-06-30
Description: The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/q3cfilevar-adv.txt; http://secunia.com/advisories/20401; http://secunia.com/advisories/20851
CVE: CVE-2006-3325
Published: 2006-06-30
Description: client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server.  NOTE: this can be combined with another vulnerability to overwrite arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/q3cfilevar-adv.txt; http://secunia.com/advisories/20401; http://secunia.com/advisories/20851
CVE: CVE-2006-3326
Published: 2006-06-30
Description: Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. (dot dot) sequences in filenames within (1) TAR,(2) GZ, and (3) JAR archives.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20864; http://www.osvdb.org/26908; http://www.securityfocus.com/bid/18722
CVE: CVE-2006-3327
Published: 2006-06-30
Description: Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter ("Special Cases" field) in profile/mini.php, (2) tyxx01_album_name parameter ("Album Name" field) in profile/photo_create.php, and the (3) u parameter in admin/user_view.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0428&w=2; http://secunia.com/advisories/20839; http://www.securityfocus.com/bid/18626
CVE: CVE-2006-3328
Published: 2006-06-30
Description: new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter ("Ticket Description" field) that points to a URL that captures referer URLs, possibly due to a cross-site scripting (XSS) vulnerability or a leak of credentials in referer URLs.
CVSS Score: 5.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/hostflow-vuln.html; http://secunia.com/advisories/20863; http://www.osvdb.org/26872
CVE: CVE-2006-3329
Published: 2006-06-30
Description: SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1179; http://securitytracker.com/id?1016407; http://www.securityfocus.com/archive/1/438667/100/0/threaded
CVE: CVE-2006-3330
Published: 2006-06-30
Description: Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20880; http://securityreason.com/securityalert/1179; http://securitytracker.com/id?1016407
CVE: CVE-2006-3331
Published: 2006-06-30
Description: Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19480; http://secunia.com/advisories/20897; http://secunia.com/secunia_research/2006-49/advisory/
CVE: CVE-2006-3332
Published: 2006-06-30
Description: SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html; http://securitytracker.com/id?1016386; http://www.securityfocus.com/bid/18681
CVE: CVE-2006-3333
Published: 2006-06-30
Description: Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters, including the (1) frommethod, (2) list, and (3) method, which are reflected in an error message.  NOTE: some of these vectors might be resultant from SQL injection.
CVSS Score: 2.6 (LOW)
References: http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19598; http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html
CVE: CVE-2006-3334
Published: 2006-06-30
Description: Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html; http://secunia.com/advisories/20960
CVE: CVE-2006-3335
Published: 2006-07-03
Description: Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/20934; http://secunia.com/advisories/21514; http://securityreason.com/securityalert/1178
CVE: CVE-2006-3337
Published: 2006-07-03
Description: Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS Score: 2.6 (LOW)
References: http://bugzilla.cpanel.net/show_bug.cgi?id=4282; http://secunia.com/advisories/20840; http://securitytracker.com/id?1016383
CVE: CVE-2006-3338
Published: 2006-07-03
Description: Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page.
CVSS Score: 2.6 (LOW)
References: http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html; http://secunia.com/advisories/20767; http://www.osvdb.org/26744
CVE: CVE-2006-3339
Published: 2006-07-03
Description: secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://jira.atlassian.com/browse/JRA-10542; http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html; http://www.osvdb.org/26745
CVE: CVE-2006-3340
Published: 2006-07-03
Description: Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the "includes" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20819; http://www.osvdb.org/27168; http://www.osvdb.org/27169
CVE: CVE-2006-3341
Published: 2006-07-03
Description: SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands via the lid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20882; http://www.securityfocus.com/bid/18718; http://www.vupen.com/english/advisories/2006/2591
CVE: CVE-2006-3342
Published: 2006-07-03
Description: Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search cmd.
CVSS Score: 2.6 (LOW)
References: http://pridels0.blogspot.com/2006/06/arctic-xss.html; http://secunia.com/advisories/20663; http://www.olate.co.uk/forums/index.php?showtopic=1698
CVE: CVE-2006-3343
Published: 2006-07-03
Description: PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1184; http://www.securityfocus.com/archive/1/438459/100/0/threaded; http://www.securityfocus.com/bid/18674
CVE: CVE-2006-3344
Published: 2006-07-03
Description: Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/20896; http://securityreason.com/securityalert/1183; http://securitytracker.com/id?1016412
CVE: CVE-2006-3345
Published: 2006-07-03
Description: Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or HTML via a chat line.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/437508/100/200/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27269; http://www.securityfocus.com/archive/1/437508/100/200/threaded
CVE: CVE-2006-3346
Published: 2006-07-03
Description: SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20915; http://securityreason.com/securityalert/1182; http://www.securityfocus.com/archive/1/438814/100/0/threaded
CVE: CVE-2006-3347
Published: 2006-07-03
Description: SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20927; http://www.osvdb.org/26952; http://www.securityfocus.com/bid/18762
CVE: CVE-2006-3348
Published: 2006-07-03
Description: Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/06/hspcomplete-vuln.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/27379; http://pridels0.blogspot.com/2006/06/hspcomplete-vuln.html
CVE: CVE-2006-3349
Published: 2006-07-03
Description: Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in (1) cat.php and (2) add.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1181; http://www.securityfocus.com/archive/1/438874/100/0/threaded; http://securityreason.com/securityalert/1181
CVE: CVE-2006-2194
Published: 2006-07-05
Description: The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/20963; http://secunia.com/advisories/20967; http://secunia.com/advisories/20987
CVE: CVE-2006-2910
Published: 2006-07-05
Description: Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19456; http://secunia.com/secunia_research/2006-45/advisory/; http://www.securityfocus.com/bid/18825
CVE: CVE-2006-2935
Published: 2006-07-05
Description: The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-120
References: http://bugzilla.kernel.org/show_bug.cgi?id=2966; http://secunia.com/advisories/21179; http://secunia.com/advisories/21298
CVE: CVE-2006-3336
Published: 2006-07-05
Description: TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt.  NOTE: this is only a vulnerability when the server allows script execution in the pub directory.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20992; http://securitytracker.com/id?1016458; http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFileUploads
CVE: CVE-2006-3351
Published: 2006-07-06
Description: Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
CVSS Score: 5.4 (MEDIUM)
References: http://securityreason.com/securityalert/1186; http://www.securityfocus.com/archive/1/439153/100/0/threaded; http://www.securityfocus.com/archive/1/439660/100/200/threaded
CVE: CVE-2006-3352
Published: 2006-07-06
Description: Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object.  NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status
CVSS Score: 6.4 (MEDIUM)
References: http://isc.sans.org/diary.php?storyid=1448; http://www.securityfocus.com/archive/1/438785/100/0/threaded; http://www.securityfocus.com/archive/1/438788/100/0/threaded
CVE: CVE-2006-3353
Published: 2006-07-06
Description: Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that accesses certain style sheets properties.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://echo.or.id/adv/adv35-y3dips-2006.txt; http://securityreason.com/securityalert/1185; http://www.osvdb.org/27511
CVE: CVE-2006-3354
Published: 2006-07-06
Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://browserfun.blogspot.com/2006/07/mobb-1-adodbrecordset-filter-property.html; http://www.osvdb.org/26834; http://www.securityfocus.com/bid/18773
CVE: CVE-2006-3355
Published: 2006-07-06
Description: Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function.  NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=133988; http://secunia.com/advisories/20937; http://security.gentoo.org/glsa/glsa-200607-01.xml
CVE: CVE-2006-3356
Published: 2006-07-06
Description: The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference.  NOTE: This is a different issue than CVE-2006-1469.
CVSS Score: 2.6 (LOW)
References: http://www.security-protocols.com/sp-x31-advisory.php; http://www.vupen.com/english/advisories/2006/2606; https://exchange.xforce.ibmcloud.com/vulnerabilities/27482
CVE: CVE-2006-3357
Published: 2006-07-06
Description: Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
CVSS Score: 7.5 (HIGH)
References: http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html; http://secunia.com/advisories/20906; http://securitytracker.com/id?1016434