PT-2006-2206 · Microsoft · Internet Explorer

Heiko Schultze · Published 2006-04-11 · Updated 2021-07-23 · CVE-2006-1190

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A vulnerability exists in the way Internet Explorer returns IOleClientSite information when an embedded object is dynamically created. This could cause Internet Explorer to run the object in the wrong security context or zone. An attacker could exploit this vulnerability by constructing a malicious Web page with a dynamically created object that makes use of the IOleClientSite information returned to make a security-related decision. This could potentially allow remote code execution or information disclosure if a user visited the malicious Web site. A successful exploitation could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1190

Affected Products

Internet Explorer

References · 21

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1190 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1190 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25552 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1735 · Note
• http://xforce.iss.net/xforce/xfdb/25552 · Note
• http://securityfocus.com/bid/17455 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735 · Note
• http://vupen.com/english/advisories/2006/1318 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965 · Note
• http://securitytracker.com/id?1015900 · Note
• http://frsirt.com/english/advisories/2006/1318 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:965 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1783 · Note