CVE-2006-1190

Sažetak

Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code.

Reference

http://www.kb.cert.org/vuls/id/959649
http://www.securityfocus.com/bid/17455
http://secunia.com/advisories/18957
http://securitytracker.com/id?1015900
http://www.vupen.com/english/advisories/2006/1318
https://exchange.xforce.ibmcloud.com/vulnerabilities/25552
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1783
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1541
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

23-07-2021 - 12:55

Objavljeno

11-04-2006 - 23:02