Description
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Windows XP/2000/2003 - MHTML URI Buffer Overflow (PoC) EDB-27930 · dos · May 31, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20060531 Internet explorer Vulnerbility mailing-list
- VU#891204 third-party-advisory
- 20384 third-party-advisory
- ADV-2006-2088 vdb-entry
- ie-mhtml-mid-bo(26810) vdb-entry
- 25949 vdb-entry
- oval:org.mitre.oval:def:441 vdb-entry signature
- 1016654 vdb-entry
- 20060601 Re: Internet explorer Vulnerbility mailing-list
- MS06-043 vendor-advisory
- TA06-220A third-party-advisory
- 18198 vdb-entry
- 20060601 RE: Internet explorer Vulnerbility mailing-list