CVE-2006-3729: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 20.6% chance of exploitation in the next 30 days.

DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object, which leads to an integer overflow and a null dereference.

Affected products

• Microsoft Internet Explorer: version 6.0 only

Published 2006-07-21. Last modified 2026-06-16.