PT-2006-1646 · Adobe+1 · Shockwave Flash+1

Publicado 2006-02-08 · Atualizado 2021-07-23 · CVE-2006-0585

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6.0 SP1 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved through a Shockwave Flash object containing ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, triggering a null dereference.

Recommendations For Microsoft Internet Explorer versions 6.0 SP1 and earlier, consider upgrading to a newer version to resolve the issue. As a temporary workaround, restrict the use of Shockwave Flash objects that contain ActionScript code to minimize the risk of exploitation. Avoid using the document.write function in Javascript until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0585

Produtos afetados

Internet Explorer

Shockwave Flash

Referências · 5

• 🔥 http://securityfocus.com/bid/16441 · Exploit
• 🔥 http://securitytracker.com/id?1015559 · Exploit
• http://securityfocus.com/archive/1/425422/30/6890/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0585 · Nota de Segurança
• http://securityfocus.com/archive/1/423675/100/0/threaded · Nota