CVE-2006-5152

MEDIUM 6.8CVE-2006-5152 · Published 05/10/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0.2900`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.

References

archives.neohapsis.com/archives/fulldisclosure/2006-10/0017.html
archives.neohapsis.com/archives/fulldisclosure/2006-10/0030.html
osvdb.org/31328
securityfocus.com/archive/1/447509/100/0/threaded
securityfocus.com/archive/1/447516/100/0/threaded
securityfocus.com/archive/1/447574/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free