CVE-2006-5581

Description

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A116

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072

http://www.zerodayinitiative.com/advisories/ZDI-06-048.html

http://www.vupen.com/english/advisories/2006/4966

http://www.us-cert.gov/cas/techalerts/TA06-346A.html

http://www.symantec.com/security_response/writeup.jsp?docid=2006-121212-1201-99

http://www.securityfocus.com/bid/21546

http://www.securityfocus.com/archive/1/454969/100/200/threaded

http://www.securityfocus.com/archive/1/454210/100/0/threaded

http://www.osvdb.org/30814

http://www.kb.cert.org/vuls/id/347448

http://securitytracker.com/id?1017373

http://secunia.com/advisories/23288

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3