Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString function, a different issue than CVE-2006-3510 and CVE-2006-3899.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T20:57:40.882Z
Reserved: 2007-06-21T00:00:00
Link: CVE-2006-7206

No data.

Status : Deferred
Published: 2007-06-22T00:30:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2006-7206

No data.