Lucene search

K
cve[email protected]CVE-2006-1016
HistoryMar 07, 2006 - 12:02 a.m.

CVE-2006-1016

2006-03-0700:02:00
web.nvd.nist.gov
25
2
cve-2006-1016
buffer overflow
internet explorer
windows 2000
windows xp
remote code execution
javascript

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%

Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6.0

Social References

More

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%