CVEvulnerability
CVE-2006-4687
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
Affected configurations
• microsoft ie 6
• microsoft internet explorer 5.1
• microsoft internet explorer 5.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://securitytracker.com/id?1017223 securitytracker.com
- http://www.kb.cert.org/vuls/id/197852 US Government Resource
- http://www.osvdb.org/31323 www.osvdb.org
- http://www.securityfocus.com/archive/1/451590/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21020 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4505 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-041.html Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29199 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456 oval.cisecurity.org
- http://securitytracker.com/id?1017223 securitytracker.com
- http://www.kb.cert.org/vuls/id/197852 US Government Resource
- http://www.osvdb.org/31323 www.osvdb.org
- http://www.securityfocus.com/archive/1/451590/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21020 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4505 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-041.html Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29199 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456 oval.cisecurity.org