Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
http://www.vupen.com/english/advisories/2006/2319
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://www.securityfocus.com/bid/17820
http://www.securityfocus.com/archive/1/437099/100/0/threaded
http://www.kb.cert.org/vuls/id/338828
http://securitytracker.com/id?1016291