Intrusion PreventionMS.IE.DXImageTransform.Properties.DoS
Description
This indicates an attack attempt against a denial of service vulnerability in Microsoft Internet Explorer.
The vulnerability is due to MSIE failing to handle large values in the "StartColorStr" and "EndColorStr" properties of the ActiveX object, resulting in a stack overflow. It allows remote attackers to cause a denial of service by sending a crafted html page.
Affected Products
Microsoft Internet Explorer 6.0 SP2
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Upgrade to the latest version, available from the website.
http://windows.microsoft.com/en-US/internet-explorer/downloads/ie
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 26476 |
| Created | May 20, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-3657 |
| Exploit Prediction Score | 72.63% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IE |