PT-2006-4511 · Microsoft · Internet Explorer

Published 2006-08-08 · Updated 2021-07-23 · CVE-2006-3639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A remote code execution and information disclosure issue exists in the way Internet Explorer handles redirects. This allows attackers to read cross-domain web pages and possibly execute code via specially crafted web pages. An attacker could exploit this by constructing a web page that, when viewed, could allow for information disclosure, including reading file data from another Internet Explorer domain.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider applying security patches or updates that address the issue of handling redirects to prevent information disclosure and remote code execution. As a temporary workaround, restrict access to potentially vulnerable web pages until a patch is available.

Fix

Related Identifiers

CVE-2006-3639

Affected Products

Internet Explorer

References · 14

• http://us-cert.gov/cas/techalerts/TA06-220A.html · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3639 · Security Note
• http://kb.cert.org/vuls/id/252764 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3639 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 · Vendor Advisory
• http://frsirt.com/english/advisories/2006/3212 · Note
• http://securitytracker.com/id?1016663 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-042 · Note
• http://osvdb.org/27851 · Note
• http://securityfocus.com/bid/19400 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:577 · Note
• http://vupen.com/english/advisories/2006/3212 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A577 · Note
• http://secunia.com/advisories/21396 · Note