PT-2006-2202 · Microsoft · Internet Explorer

Jan P. Monsch · Published 2006-04-11 · Updated 2021-07-23 · CVE-2006-1185

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description The issue allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption. A remote code execution vulnerability exists in the way Internet Explorer handles specially crafted and not valid HTML. An attacker could exploit the issue by constructing a malicious Web page that could potentially allow remote code execution if a user visited the malicious Web site. This could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2006-1185

Affected Products

Internet Explorer

References · 20

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-1185 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1677 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25542 · Note
• http://us-cert.gov/cas/techalerts/TA06-101A.html · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:787 · Note
• http://vupen.com/english/advisories/2006/1318 · Note
• http://securitytracker.com/id?1015900 · Note
• http://frsirt.com/english/advisories/2006/1318 · Note
• http://xforce.iss.net/xforce/xfdb/25542 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1711 · Note
• http://secunia.com/advisories/18957 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1677 · Note