Login Request a demo
Unscored severity · published Apr 11, 2006
CVE-2006-1188
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption
–
CVSS
57.6%
EPSS
No
On KEV
Description
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)57.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IE · Microsoft
5.1; 5.2.3; 6; 6; 6; 6; +5 more · source: NVD
IE
Internet Explorer · Microsoft
5.1; 5.5; 5.5; 5.5; 5.5; 6; +5 more · source: NVD
NC
Network Camera Server Vb101 · Canon
All versions, or not specified · source: NVD
Affected product
NC
Network Camera Server Vb101
Canon
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1188
secunia.com
http://secunia.com/advisories/18957
securitytracker.com
http://securitytracker.com/id?1015900
Patch
http://www.kb.cert.org/vuls/id/824324
www.securityfocus.com
http://www.securityfocus.com/archive/1/435096/30/4710/threaded
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA06-101A.html
www.vupen.com
http://www.vupen.com/english/advisories/2006/1318
More from Network Camera Server Vb101
–
CVE-2007-2680
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1…
–
CVE-2006-7065
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in…
–
CVE-2006-3354
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values…
–
CVE-2006-2900
Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the…
–
CVE-2006-1192
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that…