Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-3354. PoCs published by hdm.
AI-analyzed exploit summary This exploit triggers a denial-of-service (DoS) condition in Microsoft Internet Explorer by manipulating the 'ADODB.Recordset Filter Property' COM object, leading to a null-pointer dereference crash. The PoC uses JavaScript to create an ActiveX object and attempt invalid filter assignments.
Description
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference.
Exploits (1)
This exploit triggers a denial-of-service (DoS) condition in Microsoft Internet Explorer by manipulating the 'ADODB.Recordset Filter Property' COM object, leading to a null-pointer dereference crash. The PoC uses JavaScript to create an ActiveX object and attempt invalid filter assignments.