{
  "schema_version": "1.4.0",
  "id": "GHSA-p2jw-xr8p-fh9v",
  "modified": "2022-05-01T07:13:18Z",
  "published": "2022-05-01T07:13:18Z",
  "aliases": [
    "CVE-2006-3873"
  ],
  "details": "Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3873"
    },
    {
      "type": "WEB",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28893"
    },
    {
      "type": "WEB",
      "url": "http://research.eeye.com/html/advisories/published/AD20060912.html"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/1555"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016839"
    },
    {
      "type": "WEB",
      "url": "http://weblog.infoworld.com/techwatch/archives/007870.html"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/30834"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/445835/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/19987"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-09-12T23:07:00Z"
  }
}