NetSight
IP …
medium5.1Public exploit code

CVE-2006-2094

Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.

Affected products

VendorProductAffected versions
MicrosoftIe
Versions 5, 5.0, 5.0.1, 6.0
MicrosoftInternet Explorer
Versions 5.0, 5.0.1, 5.5, 6.0, 7.0

Weakness classification

CWE-362

References