← back
CVE-2006-2766

CVE-2006-2766

EPSS 47.9%
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27930unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-043http://secunia.com/advisories/20384http://securitytracker.com/id?1016654https://exchange.xforce.ibmcloud.com/vulnerabilities/26810https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A441http://www.kb.cert.org/vuls/id/891204http://www.osvdb.org/25949http://www.securityfocus.com/archive/1/435492/100/0/threadedhttp://www.securityfocus.com/archive/1/435609/100/0/threadedhttp://www.securityfocus.com/archive/1/435616/100/0/threadedhttp://www.securityfocus.com/bid/18198http://www.us-cert.gov/cas/techalerts/TA06-220A.html