CVE-2006-3729

Description

DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference.

Primary references

• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry