VULNERABILITY INTELLIGENCE
CVE-2006-3510
CVSS score2.6 LOW
EPSS probability14.75%
CISA KEVNot currently listed
Published2006-07-11
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:P
Description
The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.