CVE-2006-1186

Description (CNA)

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.kb.cert.org/vuls/id/959049
• http://secunia.com/advisories/18957
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446
• http://securitytracker.com/id?1015900
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651
• http://www.us-cert.gov/cas/techalerts/TA06-101A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
• http://www.securityfocus.com/bid/17453
• http://www.vupen.com/english/advisories/2006/1318
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25545
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A791

ADP enrichment