PT-2006-2397 · Microsoft · Internet Explorer

Jeffrey Van Der Stad · Published 2006-03-24 · Updated 2021-07-23 · CVE-2006-1388

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 6.0

Description The issue allows remote attackers to execute HTA files, potentially enabling remote code execution. An HTML Application (HTA) can bypass Internet Explorer's security control, executing without displaying the normal security dialog box. If a user visits a malicious website, an attacker could exploit this issue, potentially taking complete control of the affected system.

Recommendations For Microsoft Internet Explorer version 6.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1388

Affected Products

Internet Explorer

References · 28

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1388 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1388 · Security Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1642 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1676 · Note
• http://us-cert.gov/cas/techalerts/TA06-101A.html · Note
• http://frsirt.com/english/advisories/2006/1318 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1591 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25394 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724 · Note
• http://securityfocus.com/bid/17181 · Note