CVE-2006-3450

Опубликовано: 08 авг. 2006

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.

Ссылки

http://secunia.com/advisories/21396
Vendor Advisory
http://securitytracker.com/id?1016663
http://www.kb.cert.org/vuls/id/119180
Patch
US Government Resource
http://www.osvdb.org/27855
http://www.securityfocus.com/archive/1/442579/100/0/threaded
http://www.securityfocus.com/bid/19312
Patch
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
Patch
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2006/3212
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-027.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433
http://secunia.com/advisories/21396
Vendor Advisory
http://securitytracker.com/id?1016663
http://www.kb.cert.org/vuls/id/119180
Patch
US Government Resource
http://www.osvdb.org/27855
http://www.securityfocus.com/archive/1/442579/100/0/threaded
http://www.securityfocus.com/bid/19312
Patch
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
Patch
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2006/3212
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-027.html

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.63794

Средний

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-xcxm-q93f-87v7

github

почти 4 года назад