CVE-2006-3899

None

CVSS

—

EPSS

24.3%

Published

Jul 27, 2006

CISA due date

—

The record

Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside the SysAllocStringLen function.

Affected packages

Ecosystem	Package	Introduced	Fixed