CVE-2006-3357
7.5
CVSS v2.0 Base Score
66.10%
MEDIUM RiskEPSS (99th percentile)
NVD-CWE-Other
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
Published: 7/6/2006
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score (Exploitation Probability)
66.10%MEDIUM Exploitation Risk
99th percentile
This vulnerability has a 66.10% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other