CVE-2006-3897

CVE-2006-3897 describes a stack overflow vulnerability in Microsoft Internet Explorer 6 running on Windows 2000. An attacker can exploit this by creating a malicious NMSA.ASFSourceMediaDescription.1 ActiveX object with an excessively long dispValue property, leading to a denial of service (application crash). The vulnerability has a CVSS score of 5.0, indicating a medium severity, and is easily exploitable over the network with no authentication required, resulting in an application crash. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.