Описание
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.
Ссылки
- Exploit
- Vendor Advisory
- US Government Resource
- Exploit
- US Government Resource
- US Government Resource
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.63817
Средний
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-94
CWE-94
Связанные уязвимости
CVSS3: 8.8
github
больше 4 лет назад
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.
EPSS
Процентиль: 99%
0.63817
Средний
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-94
CWE-94