VULNERABILITY INTELLIGENCE

CVE-2006-5581

CVSS score9.3 HIGH
EPSS probability36.32%
CISA KEVNot currently listed
Published2006-12-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."

Primary references