Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-3510. PoCs published by hdm.
AI-analyzed exploit summary This exploit triggers a denial-of-service in Microsoft Internet Explorer 6 by leveraging a stack-based heap overflow via an ActiveX control object. The code repeatedly appends data to a string until it exceeds buffer limits, causing a crash.
Description
The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read.
Exploits (1)
This exploit triggers a denial-of-service in Microsoft Internet Explorer 6 by leveraging a stack-based heap overflow via an ActiveX control object. The code repeatedly appends data to a string until it exceeds buffer limits, causing a crash.