Vulnerability in N/a
CVE-2006-1359
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table…
EPSS: 0.876 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.computerterrorism.com/research/ct22-03-2006 (x_refsource_MISC)
- 20060328 EEYE: Temporary workaround for IE createTextRange vulnerability (mailing-list, x_refsource_BUGTRAQ)
- oval:org.mitre.oval:def:1678 (signature, x_refsource_OVAL, vdb-entry)
- 20060328 Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution) (mailing-list, x_refsource_BUGTRAQ)
- ADV-2006-1050 (vdb-entry, x_refsource_VUPEN)
- oval:org.mitre.oval:def:985 (signature, x_refsource_OVAL, vdb-entry)
- VU#876678 (x_refsource_CERT-VN, third-party-advisory)
- 24050 (x_refsource_OSVDB, vdb-entry)
- oval:org.mitre.oval:def:1178 (signature, x_refsource_OVAL, vdb-entry)
- 20060322 IE crash (mailing-list, x_refsource_FULLDISC)
Frequently asked questions
- What is CVE-2006-1359?
- CVE-2006-1359 is a vulnerability in N/a. Published 2006-03-23.
- Is CVE-2006-1359 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.