$ cve CVE-2006-3730 JSON

CVE-2006-3730 EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 63.8% (pctl 99)

Patch early

A public exploit exists.

Description

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

Scoring

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	63.82% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-94
On CISA KEV	no
Public exploit	yes
Published	2006-07-21
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	ie
microsoft	internet explorer
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)	2010-07-03
exploit-db	Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)	2006-09-29
exploit-db	Microsoft Internet Explorer - WebViewFolderIcon setSlice() (2)	2006-09-29
exploit-db	Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)	2006-09-28
exploit-db	Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)	2006-09-27

References

→ the Explorer · watch your stack · NVD