PT-2006-2206 · Microsoft · Internet Explorer
Heiko Schultze
·
Publicado
2006-04-11
·
Atualizado
2021-07-23
·
CVE-2006-1190
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 5.01 through 6
Description
A vulnerability exists in the way Internet Explorer returns IOleClientSite information when an embedded object is dynamically created. This could cause Internet Explorer to run the object in the wrong security context or zone. An attacker could exploit this vulnerability by constructing a malicious Web page with a dynamically created object that makes use of the IOleClientSite information returned to make a security-related decision. This could potentially allow remote code execution or information disclosure if a user visited the malicious Web site. A successful exploitation could allow an attacker to take complete control of an affected system.
Recommendations
For Microsoft Internet Explorer versions 5.01 through 6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Internet Explorer