Microsoft Windows WebViewFolderIcon ActiveX (integer overflow) updated since 28.09.2006
Published:		11.10.2006
Source:		CERT
SecurityVulns ID:		6656
Type:		client
Level:		10/10
Description:		Integer overflow can be used for hidden malware installation.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003

Original document		MICROSOFT, Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191) (11.10.2006)
		Alexander Sotirov, [Full-disclosure] Determina zero-day fix for CVE-2006-3730 (WebViewFolderIcon setSlice Integer Overflow) (30.09.2006)
		CERT, US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability (28.09.2006)

Files:		Exploits Microsoft IE WebViewFolderIcon setSlice Integer Overflow
		Microsoft Internet Explorer WebViewFolderIcon (setSlice) Exploit (0day) Works on all Windows XP versions including SP2
		Exploits Internet Explorer WebViewFolderIcon setSlice() Overflow (Metasploit)
		Microsoft Internet Explorer WebViewFolderIcon setSlice() D0wnLoad & Exec POC
		Microsoft Security Bulletin MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)
Discuss:		Read or add your comments to this news (0 comments)