CVE-2006-3899 describes a denial-of-service vulnerability in Microsoft Internet Explorer 6.0 running on Windows XP SP2. Remote attackers can crash the application by providing a long second argument to the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object, leading to an invalid memory access. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, resulting in a partial availability impact. While there is no evidence of active exploitation in the wild or Metasploit modules, an exploit is available on ExploitDB, and it has a high FAUCET Risk Score of 90/100 despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.0CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.