CVE-2006-5581 — Out-of-bounds Write in Microsoft Internet Explorer

2 documents2 sources

Severity

9.3CRITICALNVD

EPSS

66.2%

top 1.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Internet Explorer

Timeline

PublishedDec 12

Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer6

🔴Vulnerability Details

GHSA

GHSA-6wpm-qx89-jgjw: Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such↗2022-05-01

▶