CVE-2006-2218

Sažetak

Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.

Reference

http://www.securityfocus.com/bid/17820
http://secunia.com/advisories/19762
http://www.kb.cert.org/vuls/id/338828
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://securitytracker.com/id?1016291
http://secunia.com/secunia_research/2006-41/advisory
http://www.osvdb.org/27475
http://www.vupen.com/english/advisories/2006/2319
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
http://www.securityfocus.com/archive/1/437099/100/0/threaded

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

23-07-2021 - 12:55

Objavljeno

05-05-2006 - 12:46