Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service

Author: hdm
type: dos
platform: windows
port: 
date_added: 2006-07-08 
date_updated: 2013-09-10 
verified: 1 
codes: CVE-2006-3510;OSVDB-26955 
tags: 
aliases:  
screenshot_url:  
application_url:

source: https://www.securityfocus.com/bid/18900/info

Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers.

This issue is triggered when an attacker convinces a victim to activate a malicious ActiveX control object.

Remote attackers may exploit this issue to crash Internet Explorer 6, effectively denying service to legitimate users.

A stack-based heap overflow may be possible; as a result, remote code could run in the context of the user running the affected application. This has not been confirmed.

var a = new ActiveXObject(&#039;RDS.DataControl&#039;);
var b = "X";
while (b.length < (1024*256)) a.URL = (b+=b);