CVE-2006-4687

MEDIUM 5.1CVE-2006-4687 · Published 14/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
ie microsoft	`= 6`	No fix yet
internet explorer microsoft	`= 5.1= 5.5`	No fix yet

Description

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."

References

securitytracker.com/id
kb.cert.org/vuls/id/197852 · US Government Resource
osvdb.org/31323
securityfocus.com/archive/1/451590/100/100/threaded
securityfocus.com/bid/21020
us-cert.gov/cas/techalerts/TA06-318A.html · US Government Resource
vupen.com/english/advisories/2006/4505 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-06-041.html · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
exchange.xforce.ibmcloud.com/vulnerabilities/29199
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A456

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free