Security Advisory

CVE-2006-3638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-08-08 23:00:00
Last updated 2024-08-07 18:39:53
Assigner microsoft
CVSS score not scored
State PUBLISHED

Description

Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."