Unrated severityNVD Advisory· Published Jul 6, 2006· Updated Jun 16, 2026
CVE-2006-3357
CVE-2006-3357
Description
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
- (no CPE)range: = 6.0
Patches
Vulnerability mechanics
References
14- www.securityfocus.com/bid/18769nvdExploit
- secunia.com/advisories/20906nvdVendor Advisory
- www.kb.cert.org/vuls/id/159220nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA06-220A.htmlnvdUS Government Resource
- browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.htmlnvd
- securitytracker.com/idnvd
- www.osvdb.org/26835nvd
- www.securityfocus.com/archive/1/442733/100/0/threadednvd
- www.tippingpoint.com/security/advisories/TSRT-06-08.htmlnvd
- www.vupen.com/english/advisories/2006/2634nvd
- www.vupen.com/english/advisories/2006/2635nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27573nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13nvd
News mentions
0No linked articles in our index yet.