National Cyber-Alert System

Vulnerability Summary for CVE-2006-3730

Overview

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-283A

Name: TA06-283A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-283A.html

US-CERT Technical Alert: TA06-270A

Name: TA06-270A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-270A.html

US-CERT Vulnerability Note: VU#753044

Name: VU#753044

Hyperlink:http://www.kb.cert.org/vuls/id/753044

External Source: XF

Name: ie-webviewfoldericon-dos(27804)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27804

External Source: BID

Name: 19030

Hyperlink:http://www.securityfocus.com/bid/19030

External Source: HP

Name: SSRT061264

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/449179/100/0/threaded

External Source: BUGTRAQ

Name: 20060930 ZERT patch for setSlice()

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447490/100/0/threaded

External Source: BUGTRAQ

Name: 20060930 setSlice exploited in the wild - massively

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447426/100/0/threaded

External Source: BUGTRAQ

Name: 20060929 Determina zero-day fix for CVE-2006-3730 (WebViewFolderIcon setSlice Integer Overflow)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447383/100/100/threaded

External Source: BUGTRAQ

Name: 20060927 Exploit module available for WebViewFolderIcon setSlice 0-day

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/447174/100/0/threaded

External Source: OSVDB

Name: 27110

Hyperlink:http://www.osvdb.org/27110

External Source: MILW0RM

Name: 2440

Hyperlink:http://www.milw0rm.com/exploits/2440

External Source: MS

Name: MS06-057

Hyperlink:http://www.microsoft.com/technet/security/Bulletin/MS06-057.mspx

External Source: VUPEN

Name: ADV-2006-2882

Hyperlink:http://www.frsirt.com/english/advisories/2006/2882

External Source: SECTRACK

Name: 1016941

Hyperlink:http://securitytracker.com/id?1016941

External Source: SECUNIA

Name: 22159

Hyperlink:http://secunia.com/advisories/22159

External Source: MISC

Name: http://riosec.com/msie-setslice-vuln

Hyperlink:http://riosec.com/msie-setslice-vuln

External Source: MILW0RM

Name: 2440

Hyperlink:http://milw0rm.com/exploits/2440

External Source: MISC

Name: http://isc.sans.org/diary.php?storyid=1742

Hyperlink:http://isc.sans.org/diary.php?storyid=1742

External Source: MISC

Name: http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html

Hyperlink:http://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.html

US Government Resource: oval:org.mitre.oval:def:339

Name: oval:org.mitre.oval:def:339

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:339