Description
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
References
- 1016434 vdb-entry
- MS06-046 vendor-advisory
- VU#159220 third-party-advisory
- ADV-2006-2634 vdb-entry
- ie-hhctrl-bo(27573) vdb-entry
- 20060808 TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability mailing-list
- oval:org.mitre.oval:def:13 vdb-entry signature
- 26835 vdb-entry
- ADV-2006-2635 vdb-entry
- TA06-220A third-party-advisory
- http://www.tippingpoint.com/security/advisories/TSRT-06-08.html
- 20906 third-party-advisory
- http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html
- 18769 vdb-entry