CVE-2006-4560
First published: Wed Sep 06 2006(Updated: )
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Explorer | =6-windows_server_2003_sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-4560?
CVE-2006-4560 has a moderate severity level due to the potential for remote code execution by attackers.
How do I fix CVE-2006-4560?
To fix CVE-2006-4560, it is recommended to upgrade to a more secure version of Internet Explorer or apply any relevant Microsoft patches.
Who is affected by CVE-2006-4560?
CVE-2006-4560 affects users of Internet Explorer 6 on Windows XP SP2 and Windows Server 2003 SP1.
What type of attack does CVE-2006-4560 enable?
CVE-2006-4560 enables remote attackers to execute arbitrary JavaScript in the context of the user's browser session.
What are the implications of CVE-2006-4560?
The implications of CVE-2006-4560 include the potential for data theft, session hijacking, and other malicious activities conducted via compromised web scripts.
- agent/references
- agent/type
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft internet explorer
- version/microsoft internet explorer/6-windows_server_2003_sp1