Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Internet Explorer Nested Object Tag Handling Memory Corruption (MS06-021; CVE-2006-1992) | 21 Feb 201000:00 | – | checkpoint_advisories |
 | CVE-2006-1992 | 25 Apr 200601:00 | – | cve |
 | CVE-2006-1992 | 25 Apr 200601:00 | – | cvelist |
 | CVE-2006-1992 | 25 Apr 200601:02 | – | nvd |
 | Design/Logic Flaw | 25 Apr 200601:02 | – | prion |
| Memory corruption | 5 May 200612:46 | – | prion |
 | Microsoft Security Bulletin MS06-021 | 13 Jun 200600:00 | – | securityvulns |
 | Microsoft Internet Explorer OBJECT标签内存破坏漏洞（MS06-021） | 28 Oct 200600:00 | – | seebug |
source: https://www.securityfocus.com/bid/17658/info
Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This issue is due to a flaw in the application in handling nested OBJECT tags in HTML content.
An attacker could exploit this issue via a malicious web page to potentially execute arbitrary code in the context of the currently logged-in user, but this has not been confirmed. Exploit attempts likely result in crashing the affected application. Attackers could exploit this issue through HTML email/newsgroup postings or through other applications that employ the affected component.
Microsoft Internet Explorer 6 for Microsoft Windows XP SP2 is reportedly vulnerable to this issue; other versions may also be affected.
perl -e '{print "<STYLE></STYLE>\n<OBJECT>\nBork\n"x32}' >test.htmlData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Aug 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.6
EPSS0.40431