CVE-2006-2218

Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2006-05-05

Last modified

2024-08-07

Affected products

• Internet Explorer (Microsoft)

References

• http://secunia.com/advisories/19762
• http://secunia.com/secunia_research/2006-41/advisory
• http://securitytracker.com/id?1016291
• http://www.kb.cert.org/vuls/id/338828
• http://www.osvdb.org/27475
• http://www.securityfocus.com/archive/1/437099/100/0/threaded
• http://www.securityfocus.com/bid/17820
• http://www.us-cert.gov/cas/techalerts/TA06-164A.html
• http://www.vupen.com/english/advisories/2006/2319
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961