PT-2006-2053 · Microsoft · Internet Explorer 6.0+2

Publicado 2006-03-07 · Atualizado 2021-07-23 · CVE-2006-1016

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer 6.0 versions on Windows 2000 before SP4 and Windows XP before SP1

Description A buffer overflow issue exists in the IsComponentInstalled method, allowing remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.

Recommendations For Internet Explorer 6.0 on Windows 2000 before SP4 and Windows XP before SP1, consider applying the necessary service packs to update the operating system, which may include fixes for this issue. As a temporary workaround, consider disabling JavaScript in Internet Explorer until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1016

Produtos afetados

Internet Explorer 6.0

Windows 2000

Windows Xp

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_iscomponentinstalled.rb · Exploit
• 🔥 http://metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm · Exploit
• 🔥 https://exploit-db.com/exploits/16549 · Exploit
• http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24923 · Nota
• http://securityfocus.com/bid/16870 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1016 · Nota de Segurança