critical9.3Public exploit code
CVE-2006-2383
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data"…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft DXImageTransform.Microsoft.Light - ActiveX Control Remote Code Execution2006-06-13 · remote · windows · Verified
Impact
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.01, 6 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20595
- http://securitytracker.com/id?1016291
- http://www.kb.cert.org/vuls/id/417585
- http://www.osvdb.org/26444
- http://www.securityfocus.com/bid/18303
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2319
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26768
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1821
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1891
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1924
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1944
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1949
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2009
- http://secunia.com/advisories/20595
- http://securitytracker.com/id?1016291
- http://www.kb.cert.org/vuls/id/417585
- http://www.osvdb.org/26444
- http://www.securityfocus.com/bid/18303
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2319
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26768
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1821