Gravité: : Medium
  Identifiant(s) CVE: : CVE-2006-3730,MS06-057
  Date du conseil: 21 juillet 2015

  Description

cve: Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1000679
  Trend Micro Deep Security DPI Rule Name: 1000679 - MoBB #18: WebViewFolderIcon setSlice

  Affected software and version:

  • Microsoft Internet Explorer 6.0
  • Microsoft Internet Explorer 6.0 SP1