CVE-2006-5579

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruption Vulnerability."

Score

CVSS 2.0 9.3 Critical

Status

Modified - secure@microsoft.com

Published

2006-12-12

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Internet Explorer (Microsoft)

References

• http://secunia.com/advisories/20807
• http://secunia.com/secunia_research/2006-58/advisory/
• http://securitytracker.com/id?1017373
• http://www.kb.cert.org/vuls/id/599832
• http://www.osvdb.org/30813
• http://www.securityfocus.com/archive/1/454205/100/0/threaded
• http://www.securityfocus.com/archive/1/454969/100/200/threaded
• http://www.securityfocus.com/bid/21552
• http://www.us-cert.gov/cas/techalerts/TA06-346A.html
• http://www.vupen.com/english/advisories/2006/4966
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A761