VYPR
Unrated severityNVD Advisory· Published Jul 18, 2006· Updated Jun 16, 2026

CVE-2006-3657

CVE-2006-3657

Description

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property.

Affected products

3
  • cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
    • (no CPE)range: =6

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.