CVE-2006-1245: Buffer Overflow
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1245?
CVE-2006-1245 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2006-1245?
To remediate CVE-2006-1245, users should update to a newer, patched version of Microsoft Internet Explorer.
What are the potential impacts of exploiting CVE-2006-1245?
Exploiting CVE-2006-1245 could allow an attacker to execute arbitrary code on the affected system, potentially leading to data compromise or system loss.
Which versions of Internet Explorer are affected by CVE-2006-1245?
CVE-2006-1245 primarily affects Microsoft Internet Explorer 6.0.2900.2180 and possibly other versions prior to the security update.
Can CVE-2006-1245 be exploited through a web page?
Yes, CVE-2006-1245 can be exploited via a malicious web page containing specially crafted HTML tags with script action handlers.