CVE-2006-2218

CRITICAL 9.3CVE-2006-2218 · Published 05/05/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0`	No fix yet

Description

Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.

References

secunia.com/advisories/19762 · Patch
secunia.com/secunia_research/2006-41/advisory · Vendor Advisory
securitytracker.com/id
kb.cert.org/vuls/id/338828 · US Government Resource
osvdb.org/27475
securityfocus.com/archive/1/437099/100/0/threaded
securityfocus.com/bid/17820
us-cert.gov/cas/techalerts/TA06-164A.html · US Government Resource
vupen.com/english/advisories/2006/2319 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free