Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-1016 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Internet Explorer

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
76.5%
top 1.06%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedMar 7
Latest updateMay 1

Description

Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-49mv-qwq8-fv9m: Buffer overflow in the IsComponentInstalled method in Internet Explorer 6↗2022-05-01
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft Internet Explorer - isComponentInstalled Overflow (Metasploit)↗2010-05-09
▶
Metasploit
Microsoft Internet Explorer isComponentInstalled Overflow↗
▶