CVE-2006-3730

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

• ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

63.82% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.1% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2006-07-19 23:00Z20 YR AGO

Last updated

2026-02-25 17:54Z6 MO AGO

Reserved

2006-07-19

Assigning CNA

mitre

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

• CWE-94Improper Control of Generation of Code ('Code Injection')Base

Data version

5.2

Document digest

fa026e2f6d4379cb4f35c8181f7525e393798080cfc4295e4343edb1764bb645

• securitytracker.com1016941http://securitytracker.com/id?1016941vdb-entryx_refsource_SECTRACK
• www.us-cert.govTA06-283Ahttp://www.us-cert.gov/cas/techalerts/TA06-283A.htmlthird-party-advisoryx_refsource_CERT
• www.us-cert.govTA06-270Ahttp://www.us-cert.gov/cas/techalerts/TA06-270A.htmlthird-party-advisoryx_refsource_CERT
• docs.microsoft.comMS06-057https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-057vendor-advisoryx_refsource_MS
• www.securityfocus.comSSRT061264http://www.securityfocus.com/archive/1/449179/100/0/threadedvendor-advisoryx_refsource_HP
• www.kb.cert.orgVU#753044http://www.kb.cert.org/vuls/id/753044third-party-advisoryx_refsource_CERT-VN
• www.securityfocus.com20060927 Exploit module available for WebViewFolderIcon setSlice 0-dayhttp://www.securityfocus.com/archive/1/447174/100/0/threadedmailing-listx_refsource_BUGTRAQ
• oval.cisecurity.orgoval:org.mitre.oval:def:339https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A339vdb-entrysignaturex_refsource_OVAL
• isc.sans.orghttp://isc.sans.org/diary.php?storyid=1742x_refsource_MISC
• exchange.xforce.ibmcloud.comie-webviewfoldericon-dos(27804)https://exchange.xforce.ibmcloud.com/vulnerabilities/27804vdb-entryx_refsource_XF
• www.securityfocus.com20060929 Determina zero-day fix for CVE-2006-3730 (WebViewFolderIcon setSlice Integer Overflow)http://www.securityfocus.com/archive/1/447383/100/100/threadedmailing-listx_refsource_BUGTRAQ
• www.securityfocus.com20060930 setSlice exploited in the wild - massivelyhttp://www.securityfocus.com/archive/1/447426/100/0/threadedmailing-listx_refsource_BUGTRAQ
• riosec.comhttp://riosec.com/msie-setslice-vulnx_refsource_MISC
• www.osvdb.org27110http://www.osvdb.org/27110vdb-entryx_refsource_OSVDB
• www.securityfocus.com19030http://www.securityfocus.com/bid/19030vdb-entryx_refsource_BID
• www.vupen.comADV-2006-2882http://www.vupen.com/english/advisories/2006/2882vdb-entryx_refsource_VUPEN
• browserfun.blogspot.comhttp://browserfun.blogspot.com/2006/07/mobb-18-webviewfoldericon-setslice.htmlx_refsource_MISC
• www.exploit-db.com2440https://www.exploit-db.com/exploits/2440exploitx_refsource_EXPLOIT-DB
• www.securityfocus.com20060930 ZERT patch for setSlice()http://www.securityfocus.com/archive/1/447490/100/0/threadedmailing-listx_refsource_BUGTRAQ
• secunia.com22159http://secunia.com/advisories/22159third-party-advisoryx_refsource_SECUNIA