Unscored severity · published Sep 6, 2006
CVE-2006-4560
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by…
–
CVSS
18.7%
EPSS
No
On KEV
Description
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IE · Microsoft
6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4560
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4560
Exploit
http://polyboy.net/xss/dnsslurp.html
shampoo.antville.org
http://shampoo.antville.org/stories/1451301/
www.osvdb.org
http://www.osvdb.org/31329
www.securityfocus.com
http://www.securityfocus.com/archive/1/443209/100/200/threaded
More from IE
8.8
CVE-2012-4792
Microsoft Internet Explorer Use-After-Free Vulnerability
8.8
CVE-2006-3730
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff…
–
CVE-2012-1545
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging…
–
CVE-2010-5071
The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle…
–
CVE-2002-2435
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to…