CVE-2006-5581

Description (CNA)

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/archive/1/454210/100/0/threaded
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A116
• http://www.vupen.com/english/advisories/2006/4966
• http://secunia.com/advisories/23288
• http://www.us-cert.gov/cas/techalerts/TA06-346A.html
• http://www.kb.cert.org/vuls/id/347448
• http://www.securityfocus.com/archive/1/454969/100/200/threaded
• http://www.symantec.com/security_response/writeup.jsp?docid=2006-121212-1201-99
• http://www.securityfocus.com/archive/1/454969/100/200/threaded
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
• http://www.osvdb.org/30814
• http://www.zerodayinitiative.com/advisories/ZDI-06-048.html
• http://securitytracker.com/id?1017373
• http://www.securityfocus.com/bid/21546

ADP enrichment