CVE-2006-1992

LOW 2.6CVE-2006-1992 · Published 25/04/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0.2900`	No fix yet

Description

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.

References

archives.neohapsis.com/archives/fulldisclosure/2006-04/0616.html
lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html
secunia.com/advisories/19762 · Patch
securityreason.com/securityalert/781
securitytracker.com/id · Exploit
securitytracker.com/id · Patch
osvdb.org/27475
securityfocus.com/archive/1/431796/100/0/threaded
securityfocus.com/bid/17658 · Exploit
vupen.com/english/advisories/2006/1507 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
exchange.xforce.ibmcloud.com/vulnerabilities/25978

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free