PT-2006-4509 · Microsoft · Internet Explorer

Published 2006-08-08 · Updated 2021-07-23 · CVE-2006-3637

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 and 6

Description The issue arises from improper handling of certain HTML layout component combinations, leading to memory corruption. This allows remote attackers to potentially execute arbitrary code via a crafted HTML file. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution if a user views the page, and could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 and 6, consider disabling the rendering of complex HTML layouts as a temporary workaround until a patch is available. Restrict access to untrusted web pages to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-3637

Affected Products

Internet Explorer

References · 14

• 🔥 https://exploit-db.com/exploits/27971 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3637 · Security Note
• http://us-cert.gov/cas/techalerts/TA06-220A.html · Patch
• http://kb.cert.org/vuls/id/340060 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3637 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 · Vendor Advisory
• http://frsirt.com/english/advisories/2006/3212 · Note
• http://securitytracker.com/id?1016663 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-042 · Note
• http://vupen.com/english/advisories/2006/3212 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:502 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A502 · Note
• http://osvdb.org/27853 · Note
• http://secunia.com/advisories/21396 · Note