CVE-2006-3638

No fix known EPSS 37%

Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."

Published 2006-08-08 · CVE record · OSV

Products: microsoft ie, microsoft internet_explorer