CVE-2006-4687
7.7 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.574 Medium
EPSS
Percentile
97.7%
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka “HTML Rendering Memory Corruption Vulnerability.”
References
securitytracker.com/id?1017223
www.kb.cert.org/vuls/id/197852
www.osvdb.org/31323
www.securityfocus.com/archive/1/451590/100/100/threaded
www.securityfocus.com/bid/21020
www.us-cert.gov/cas/techalerts/TA06-318A.html
www.vupen.com/english/advisories/2006/4505
www.zerodayinitiative.com/advisories/ZDI-06-041.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
exchange.xforce.ibmcloud.com/vulnerabilities/29199
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456
Related
7.7 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.574 Medium
EPSS
Percentile
97.7%