PT-2006-2207 · Microsoft · Internet Explorer

Published 2006-04-11 · Updated 2021-07-23 · CVE-2006-1191

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description The issue allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site. This is due to the way Internet Explorer handles navigation methods, which can lead to information disclosure if a user visits a malicious Web site or views a specially crafted e-mail message. An attacker who successfully exploits this could read cookies or other data from another Internet Explorer domain, but user interaction is required.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider restricting access to sensitive information and avoiding the use of potentially vulnerable navigation methods until a fix is available. As a temporary workaround, users should be cautious when navigating to different sites and avoid interacting with suspicious Web pages or e-mail messages.

Exploit

Fix

Related Identifiers

CVE-2006-1191

Affected Products

Internet Explorer

References · 16

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1191 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1191 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25555 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1251 · Note
• http://vupen.com/english/advisories/2006/1318 · Note
• http://frsirt.com/english/advisories/2006/1318 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1251 · Note
• http://securitytracker.com/id?1015892 · Note
• http://xforce.iss.net/xforce/xfdb/25555 · Note
• http://securityfocus.com/bid/17457 · Note
• http://secunia.com/advisories/18957 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1710 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-013 · Note