Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-1359
HistoryMar 23, 2006 - 12:06 a.m.

CVE-2006-1359

2006-03-2300:06:00
CWE-94
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

Affected configurations

NVD
Node
microsoftieMatch6.0sp1
OR
microsoftieMatch6.0sp2
OR
microsoftieMatch7.0beta_2
OR
microsoftinternet_explorerMatch6.0

References

Related

checkpoint_advisories 3
packetstorm 1
cert 1
saint 4
prion 1
securityvulns 3
cve 1
cvelist 1
mskb 1
nessus 1
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer createTextRange Denial of Service - Ver2 (CVE-2006-1359)
2014-03-03 00:00:00
Internet Explorer createTextRange Remote Code Execution (MS06-013) - Ver2 (CVE-2006-1359)
2014-03-03 00:00:00
Update Protection against Microsoft Internet Explorer createTextRange () Vulnerability (MS06-013)
2006-03-27 00:00:00
packetstorm
packetstorm
Internet Explorer createTextRange() Code Execution
2009-11-26 00:00:00
cert
cert
Microsoft Internet Explorer createTextRange() vulnerability
2006-03-23 00:00:00
saint
saint
Internet Explorer createTextRange memory corruption
2006-03-28 00:00:00
Internet Explorer createTextRange memory corruption
2006-03-28 00:00:00
Internet Explorer createTextRange memory corruption
2006-03-28 00:00:00
prion
prion
Null pointer dereference
2006-03-23 00:06:00
securityvulns
securityvulns
Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution)
2006-03-29 00:00:00
US-CERT Technical Cyber Security Alert TA06-101A -- Microsoft Windows and Internet Explorer Vulnerabilities
2006-04-12 00:00:00
Microsoft Security Bulletin MS06-013 Cumulative Security Update for Internet Explorer (912812)
2006-04-11 00:00:00
cve
cve
CVE-2006-1359
2006-03-23 00:06:00
cvelist
cvelist
CVE-2006-1359
2006-03-23 00:00:00
mskb
mskb
MS06-013: Cumulative security update for Internet Explorer
2017-03-30 05:55:09
nessus
nessus
MS06-013: Cumulative Security Update for Internet Explorer (912812)
2006-04-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON
Related for NVD:CVE-2006-1359
checkpoint_advisories3packetstorm1cert1saint4prion1securityvulns3cve1cvelist1mskb1nessus1