Unscored severity · published Dec 12, 2006
CVE-2006-5578
Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain…
–
CVSS
21.9%
EPSS
No
On KEV
Description
Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5577.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IE · Microsoft
through 6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5578
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5578
secunia.com
http://secunia.com/advisories/23288
securitytracker.com
http://securitytracker.com/id?1017374
US Government Resource
http://www.kb.cert.org/vuls/id/694344
www.osvdb.org
http://www.osvdb.org/30815
www.securityfocus.com
http://www.securityfocus.com/archive/1/454969/100/200/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21494
More from IE
8.8
CVE-2012-4792
Microsoft Internet Explorer Use-After-Free Vulnerability
8.8
CVE-2006-3730
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff…
–
CVE-2012-1545
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging…
–
CVE-2010-5071
The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle…
–
CVE-2002-2435
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to…