VULNERABILITY INTELLIGENCE

CVE-2006-1359

CVSS score9.3 HIGH
EPSS probability68.34%
CISA KEVNot currently listed
Published2006-03-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references