CVE-2006-3281

Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and whose extension contains the CLSID Key identifier for HTML Applications (HTA), aka "Folder GUID Code Execution Vulnerability." NOTE: directory traversal sequences were used in the original exploit, although their role is not clear.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

48.22% chance of exploitation in the next 30 days, 99th percentile

Published

2006-06-28

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28357

References

• CVE Record
• NVD entry

Related

• CVE-2006-3280
• CVE-2006-3292
• CVE-2006-3277
• CVE-2006-3294
• CVE-2006-3274
• CVE-2006-3295