PT-2006-2397 · Microsoft · Internet Explorer

Jeffrey Van Der Stad · Publicado 2006-03-24 · Atualizado 2021-07-23 · CVE-2006-1388

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 6.0

Description The issue allows remote attackers to execute HTA files, potentially enabling remote code execution. An HTML Application (HTA) can bypass Internet Explorer's security control, executing without displaying the normal security dialog box. If a user visits a malicious website, an attacker could exploit this issue, potentially taking complete control of the affected system.

Recommendations For Microsoft Internet Explorer version 6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-1388

Produtos afetados

Internet Explorer

Referências · 28

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1642 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1388 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Aviso do Fabricante
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1676 · Nota
• http://us-cert.gov/cas/techalerts/TA06-101A.html · Nota
• http://frsirt.com/english/advisories/2006/1318 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1591 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25394 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1388 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724 · Nota
• http://securityfocus.com/bid/17181 · Nota