NVD

Id
59959  
Name
CVE-2006-1245  
Description
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-16  
Modified Date
2011-03-07  
Seq
2006-1245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308558 59959 CVE-2006-1245 20060316 Remote overflow in MSIE script action handlers (mshtml.dll)  View
308559 59959 CVE-2006-1245 oval:org.mitre.oval:def:1451  View
308560 59959 CVE-2006-1245 oval:org.mitre.oval:def:1569  View
308561 59959 CVE-2006-1245 oval:org.mitre.oval:def:1599  View
308562 59959 CVE-2006-1245 oval:org.mitre.oval:def:1632  View
308563 59959 CVE-2006-1245 oval:org.mitre.oval:def:1766  View
308564 59959 CVE-2006-1245 1015794  View
308565 59959 CVE-2006-1245 VU#984473  View
308566 59959 CVE-2006-1245 MS06-013  View
308567 59959 CVE-2006-1245 20060325 Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll)  View
308568 59959 CVE-2006-1245 20061203 MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit  View
308569 59959 CVE-2006-1245 20061205 Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit  View
308570 59959 CVE-2006-1245 17131  View
308571 59959 CVE-2006-1245 TA06-101A  View
308572 59959 CVE-2006-1245 ADV-2006-1318  View
308573 59959 CVE-2006-1245 ie-mshtml-bo(25292)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57983 JVNDB-2006-000179 Microsoft Internet Explorer の Mshtml.dll におけるメモリ領域が破壊される脆弱性 ------------ CVE-2006-1245 17347 CVE-2006-1245 59959 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000179.html 2006-04-11 2007-04-01 View