PT-2006-6288 · Microsoft · Internet Explorer

Published 2006-12-12 · Updated 2018-10-17 · CVE-2006-5577

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 and earlier

Description: The issue allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder. An information disclosure vulnerability exists in certain scenarios where the path to the cached content in the TIF folder could be disclosed. An attacker could exploit the issue by constructing a specially crafted Web page that could allow for information disclosure if a user viewed the Web page. This would enable the attacker to retrieve files from the Temporary Internet Files (TIF) folder on a user's system, but user interaction is required to exploit the issue.

Recommendations: For Microsoft Internet Explorer versions 6 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-5577

Affected Products

Internet Explorer

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2006-5577 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 · Vendor Advisory
• http://securityfocus.com/archive/1/454969/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5577 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-072 · Note
• http://securityfocus.com/bid/21507 · Note
• http://us-cert.gov/cas/techalerts/TA06-346A.html · Note
• http://securityfocus.com/archive/1/archive/1/454969/100/200/threaded · Note
• http://vupen.com/english/advisories/2006/4966 · Note
• http://secunia.com/advisories/23288 · Note
• http://securitytracker.com/id?1017374 · Note
• http://osvdb.org/30816 · Note
• http://frsirt.com/english/advisories/2006/4966 · Note