CVE - CVE-2006-3427 (under review)

CVE-ID
CVE-2006-3427 (under review)	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://browserfun.blogspot.com/2006/07/mobb-6-structuredgraphicscontrol.html BID:18855 URL:http://www.securityfocus.com/bid/18855 VUPEN:ADV-2006-2687 URL:http://www.vupen.com/english/advisories/2006/2687 OSVDB:26839 URL:http://www.osvdb.org/26839 XF:ie-structuredgraphicscontrol-sourceurl-dos(27565) URL:http://xforce.iss.net/xforce/xfdb/27565
Status
Candidate	This CVE Identifier has "Candidate" status and must be reviewed and accepted by the CVE Editorial Board before it can be updated to official "Entry" status on the CVE List. It may be modified or even rejected in the future.
Phase
Assigned (20060706)
Votes

Comments

Candidate assigned on 20060706 and proposed on N/A
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org