PT-2006-4511 · Microsoft · Internet Explorer

Publicado 2006-08-08 · Atualizado 2021-07-23 · CVE-2006-3639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A remote code execution and information disclosure issue exists in the way Internet Explorer handles redirects. This allows attackers to read cross-domain web pages and possibly execute code via specially crafted web pages. An attacker could exploit this by constructing a web page that, when viewed, could allow for information disclosure, including reading file data from another Internet Explorer domain.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider applying security patches or updates that address the issue of handling redirects to prevent information disclosure and remote code execution. As a temporary workaround, restrict access to potentially vulnerable web pages until a patch is available.

Correção

Identificadores relacionados

CVE-2006-3639

Produtos afetados

Internet Explorer

Referências · 14

• http://frsirt.com/english/advisories/2006/3212 · Nota
• http://securitytracker.com/id?1016663 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-042 · Nota
• http://osvdb.org/27851 · Nota
• http://us-cert.gov/cas/techalerts/TA06-220A.html · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3639 · Nota de Segurança
• http://securityfocus.com/bid/19400 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:577 · Nota
• http://kb.cert.org/vuls/id/252764 · Correção
• http://vupen.com/english/advisories/2006/3212 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3639 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A577 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 · Aviso do Fabricante
• http://secunia.com/advisories/21396 · Nota