CVE-2006-2766: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 47.9% chance of exploitation in the next 30 days.

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 6.0 only; version 7.0 only

Published 2006-06-02. Last modified 2026-06-16.