CVE-2006-1190

Description

Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1783

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1541

https://exchange.xforce.ibmcloud.com/vulnerabilities/25552

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013

http://www.vupen.com/english/advisories/2006/1318

http://www.securityfocus.com/bid/17455

http://www.kb.cert.org/vuls/id/959649

http://securitytracker.com/id?1015900

http://secunia.com/advisories/18957

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3