Vulnerability in Microsoft Internet_explorer
CVE-2006-1016
Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled wi…
EPSS: 0.667 (99.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-2006-1016?
- CVE-2006-1016 is a vulnerability in Microsoft Internet_explorer. Published 2006-03-07.
- Is CVE-2006-1016 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.