PT-2006-3346 · Microsoft · Internet Explorer

Published 2006-06-13 · Updated 2021-07-23 · CVE-2006-2385

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file. A remote code execution vulnerability exists in the way Internet Explorer saves multipart HTML (.mht) files. An attacker could exploit the vulnerability by constructing a specially crafted Web page and convincing a user to save this Web page as a multipart HTML file, potentially allowing remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system, however significant user interaction is required.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier, consider disabling the ability to save web pages as multipart HTML (.mht) files until a patch is available. As a temporary workaround, restrict access to saving web pages as .mht files to minimize the risk of exploitation.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-2385

Affected Products

Internet Explorer

References · 24

• http://secunia.com/advisories/20595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2385 · Security Note
• http://vupen.com/english/advisories/2006/2319 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2385 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 · Vendor Advisory
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1665 · Note
• http://frsirt.com/english/advisories/2006/2319 · Note
• http://osvdb.org/26446 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1423 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-021 · Note
• http://securitytracker.com/id?1016291 · Note
• http://securityfocus.com/bid/18320 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1665 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26782 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1916 · Note