Unscored severity · published Jul 6, 2006
CVE-2006-3354
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values…
–
CVSS
17.1%
EPSS
No
On KEV
Description
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.1% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IE · Microsoft
6; 6; 6; 6; 6; 6; +8 more · source: NVD
IE
Internet Explorer · Microsoft
6; 6.0; 6.0.2600; 6.0.2800; 6.0.2800.1106; 6.0.2900.2180 · source: NVD
NC
Network Camera Server Vb101 · Canon
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3354
Exploit
http://browserfun.blogspot.com/2006/07/mobb-1-adodbrecordset-filter-property.html
www.osvdb.org
http://www.osvdb.org/26834
Exploit
http://www.securityfocus.com/bid/18773
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27596
More from Network Camera Server Vb101
–
CVE-2007-2680
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1…
–
CVE-2006-7065
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in…
–
CVE-2006-2900
Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the…
–
CVE-2006-1192
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that…
–
CVE-2006-1188
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption