CVE-2006-3910

EPSS 16.7%

Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, which triggers a null dereference.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/28246unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://browserfun.blogspot.com/2006/07/mobb-20-ovctl-newdefaultitem.html https://exchange.xforce.ibmcloud.com/vulnerabilities/27845 http://www.osvdb.org/27112 http://www.securityfocus.com/bid/19079 http://www.vupen.com/english/advisories/2006/2915