EDB-1838

functional

Microsoft Internet Explorer - HTML Tag Memory Corruption (MS06-013)

view exploit source exploit_dbverifiedtype dosauthor Thomas Waldeggerpublished 2006-05-27catalog exploit_db
01

exploited CVEs (10)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-1185UShigh7.5Exploit
Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption.
CVE-2006-1186UShigh10.0Exploit
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM obj…
CVE-2006-1188UShigh7.5Exploit
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.
CVE-2006-1189UShigh10.0Exploit
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (I…
CVE-2006-1190UShigh10.0Exploit
Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Ex…
CVE-2006-1191USmedium4.0OT elevatedExploit
Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive…
CVE-2006-1192USlow2.6Exploit
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that…
CVE-2006-1388UShigh7.5Exploit
Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.
CVE-2006-1359UShigh9.3Exploit
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox…
CVE-2006-1245UShigh7.5Exploit
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a la…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan