CVE-2006-3638

The record

Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
• CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
• CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
• CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
• CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
• CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119