Exploitation Summary
CVE-2006-3730 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including Metasploit, LukeHack, YAG KOHHA, including a Metasploit module exploits/windows/browser/ms06_057_webview_setslice.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in the WebViewFolderIcon ActiveX control (CVE-2006-3730) via a malicious HTML page. It uses heap spraying and a vulnerable ActiveX method to achieve remote code execution.
Description
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.
Exploits (6)
This is a Metasploit module exploiting a buffer overflow in the WebViewFolderIcon ActiveX control (CVE-2006-3730) via a malicious HTML page. It uses heap spraying and a vulnerable ActiveX method to achieve remote code execution.
This exploit targets a vulnerability in Microsoft Internet Explorer's WebViewFolderIcon ActiveX control (CVE-2006-3730) via a heap spray technique to achieve remote code execution. It generates an HTML file with malicious JavaScript that triggers the vulnerability when loaded in IE.
This exploit targets a vulnerability in Microsoft Internet Explorer's WebViewFolderIcon ActiveX control via a heap spray technique to achieve remote code execution. The shellcode downloads and executes a payload from a remote URL.
This exploit targets a vulnerability in Microsoft Internet Explorer's WebViewFolderIcon ActiveX control (CVE-2006-3730) via a heap spray technique to achieve remote code execution. It sprays the heap with NOP sleds and shellcode to invoke calc.exe as a proof of concept.
This exploit targets a buffer overflow vulnerability in the WebViewFolderIcon ActiveX control (CVE-2006-3730) via a malicious HTML page. It leverages the setSlice() method to trigger memory corruption and execute arbitrary shellcode.
This Metasploit module exploits a buffer overflow in the WebViewFolderIcon ActiveX control (CVE-2006-3730) via a crafted HTML page with JavaScript that triggers the vulnerability, leading to remote code execution on vulnerable Windows systems.
References (20)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H