CVE-2006-1359
- State
- Published
- Severity
- Not scored
- Published
- Mar 23, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 22, 2006
Description
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.computerterrorism.com/research/ct22-03-2006
- 20060328 EEYE: Temporary workaround for IE createTextRange vulnerabilitymailing-list
- oval:org.mitre.oval:def:1678vdb-entrysignature
- 20060328 Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution)mailing-list
- ADV-2006-1050vdb-entry
- oval:org.mitre.oval:def:985vdb-entrysignature
- VU#876678third-party-advisory
- 24050vdb-entry
- oval:org.mitre.oval:def:1178vdb-entrysignature
- 20060322 IE crashmailing-list
- TA06-101Athird-party-advisory
- oval:org.mitre.oval:def:1702vdb-entrysignature
- 18680third-party-advisory
- http://secunia.com/secunia_research/2006-7/advisory/
- oval:org.mitre.oval:def:1657vdb-entrysignature
- ie-createtextrange-command-execution(25379)vdb-entry
- 20060327 Determina Fix for the IE createTextRange() bugmailing-list
- 1015812vdb-entry
- MS06-013vendor-advisory
- 20060322 IE crashmailing-list
- 20060322 Microsoft Internet Explorer (mshtml.dll) - Remote Code Executionmailing-list
- 20060322 FW: [Full-disclosure] IE crashmailing-list
- 20060323 Secunia Research: Microsoft Internet Explorer "createTextRange()"Code Executionmailing-list
- http://www.microsoft.com/technet/security/advisory/917077.mspx
- 17196vdb-entry
- Q-154third-party-advisorygovernment-resource
- ADV-2006-1318vdb-entry
- 20060322 Microsoft Internet Explorer (mshtml.dll) - Remote Code Executionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.