PT-2006-4509 · Microsoft · Internet Explorer

Publicado 2006-08-08 · Atualizado 2021-07-23 · CVE-2006-3637

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 and 6

Description The issue arises from improper handling of certain HTML layout component combinations, leading to memory corruption. This allows remote attackers to potentially execute arbitrary code via a crafted HTML file. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution if a user views the page, and could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 and 6, consider disabling the rendering of complex HTML layouts as a temporary workaround until a patch is available. Restrict access to untrusted web pages to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-3637

Produtos afetados

Internet Explorer

Referências · 14

• 🔥 https://exploit-db.com/exploits/27971 · Exploit
• http://frsirt.com/english/advisories/2006/3212 · Nota
• http://securitytracker.com/id?1016663 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-042 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3637 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-220A.html · Correção
• http://kb.cert.org/vuls/id/340060 · Correção
• http://vupen.com/english/advisories/2006/3212 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:502 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A502 · Nota
• http://osvdb.org/27853 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3637 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 · Aviso do Fabricante
• http://secunia.com/advisories/21396 · Nota