CVE-2006-2766

Description

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.

Risk Information

Base Score

6.2

MODERATE

Vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

67.496

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Outlook Express for Windows XP (KB920214)	Windows
Security Update for Outlook Express for Windows Server 2003 (KB920214)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234