CVE-2006-2218
Last modified
CVE-2006-2218 is a vulnerability of currently unknown severity. Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.. EPSS estimates a 32.78% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | 6.0 |
References
- http://secunia.com/advisories/19762Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-41/advisoryVendor Advisory
- http://www.kb.cert.org/vuls/id/338828US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-164A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/2319Vendor Advisory
- http://secunia.com/advisories/19762Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-41/advisoryVendor Advisory
- http://www.kb.cert.org/vuls/id/338828US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA06-164A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/2319Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2218?
How severe is CVE-2006-2218?
How do I fix CVE-2006-2218?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2212Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earli…
- CVE-2006-2213Hostapd 0.3.7-2 allows remote attackers to cause a denial of…
- CVE-2006-2214Multiple SQL injection vulnerabilities in 4images 1.7.1 and …
- CVE-2006-2215Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-2216Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers t…
- CVE-2006-2217SQL injection vulnerability in index.php in Invision Power B…
- CVE-2006-2219phpBB 2.0.20 does not verify user-specified input variable t…
- CVE-2006-2220phpBB 2.0.20 does not properly verify user-specified input v…
- CVE-2006-2221A third-party installer generation tool, possibly BitRock In…
- CVE-2006-2222Buffer overflow in zawhttpd 0.8.23, and possibly previous ve…
- CVE-2006-2223RIPd in Quagga 0.98 and 0.99 before 20060503 does not proper…
- CVE-2006-2224RIPd in Quagga 0.98 and 0.99 before 20060503 does not proper…
Are you affected by CVE-2006-2218?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
