VULNERABILITY INTELLIGENCE
CVE-2006-1186
CVSS score10 HIGH
EPSS probability58.26%
CISA KEVNot currently listed
Published2006-04-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com