PT-2006-6288 · Microsoft · Internet Explorer

Publicado 2006-12-12 · Atualizado 2018-10-17 · CVE-2006-5577

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 and earlier

Description: The issue allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder. An information disclosure vulnerability exists in certain scenarios where the path to the cached content in the TIF folder could be disclosed. An attacker could exploit the issue by constructing a specially crafted Web page that could allow for information disclosure if a user viewed the Web page. This would enable the attacker to retrieve files from the Temporary Internet Files (TIF) folder on a user's system, but user interaction is required to exploit the issue.

Recommendations: For Microsoft Internet Explorer versions 6 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-5577

Produtos afetados

Internet Explorer

Referências · 14

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-072 · Nota
• http://securityfocus.com/bid/21507 · Nota
• http://us-cert.gov/cas/techalerts/TA06-346A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5577 · Nota de Segurança
• http://securityfocus.com/archive/1/archive/1/454969/100/200/threaded · Nota
• http://vupen.com/english/advisories/2006/4966 · Nota
• http://secunia.com/advisories/23288 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 · Aviso do Fabricante
• http://securityfocus.com/archive/1/454969/100/200/threaded · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5577 · Nota de Segurança
• http://securitytracker.com/id?1017374 · Nota
• http://osvdb.org/30816 · Nota
• http://frsirt.com/english/advisories/2006/4966 · Nota