CVE-2006-1992 mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences inclu...
LowCVSS 2.6
EPSS 40.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0.2900 | No fix listed |
References
- 20060422 Re: MSIE (mshtml.dll) OBJECT tag vulnerability mailing-list
- 20060423 MSIE (mshtml.dll) OBJECT tag vulnerability mailing-list
- 19762 patch third-party-advisory vendor-advisory
- 781 third-party-advisory
- 1016001 exploit vdb-entry
- 1016291 patch vdb-entry
- 27475 vdb-entry
- 20060422 MSIE (mshtml.dll) OBJECT tag vulnerability mailing-list
- 17658 exploit vdb-entry
- ADV-2006-1507 vdb-entry vendor-advisory
- MS06-021 vendor-advisory
- ie-object-memory-corruption(25978) vdb-entry