VULNERABILITY INTELLIGENCE
CVE-2006-1245
CVSS score7.5 HIGH
EPSS probability61.82%
CISA KEVNot currently listed
Published2006-03-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
Primary references
- secure@microsoft.com
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Patch
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Exploit
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — Exploit, Patch
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com