CVE-2006-1186

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.

Score

CVSS 2.0 10.0 Critical

Status

Modified - secure@microsoft.com

Published

2006-04-11

Last modified

2024-08-07

Affected products

• Ie (Microsoft)
• Internet Explorer (Microsoft)

References

• http://secunia.com/advisories/18957
• http://securitytracker.com/id?1015900
• http://www.kb.cert.org/vuls/id/959049
• http://www.securityfocus.com/bid/17453
• http://www.us-cert.gov/cas/techalerts/TA06-101A.html
• http://www.vupen.com/english/advisories/2006/1318
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25545
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A791