CVE-2006-2382 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-2382
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2382

Description: Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26766 ST 1016291 SAID Secunia Advisory: SA20595 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1862 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1752 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1621 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1414 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1906 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1931 OSVDB 26443 MS http://www.microsoft.com/technet/security/bulletin/ms06-021.mspx MISC http://www.zerodayinitiative.com/advisories/ZDI-06-017.html CERT-VN 136849 CERT http://www.us-cert.gov/cas/techalerts/TA06-164A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/436985/100/0/threaded BID 18309

Return to the previous page.