CVE-2006-5577
First published: Tue Dec 12 2006(Updated: )
Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5578.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Explorer | <=6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/23288
- http://securitytracker.com/id?1017374
- http://www.osvdb.org/30816
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
- http://www.securityfocus.com/bid/21507
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html
- http://www.vupen.com/english/advisories/2006/4966
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313
Frequently Asked Questions
What is the severity of CVE-2006-5577?
CVE-2006-5577 is considered to have a moderate severity rating due to potential information disclosure.
How do I fix CVE-2006-5577?
To fix CVE-2006-5577, it is recommended to upgrade to a more recent version of Internet Explorer that is not vulnerable.
What versions of Internet Explorer are affected by CVE-2006-5577?
CVE-2006-5577 affects Microsoft Internet Explorer 6 and earlier versions.
What type of vulnerability is CVE-2006-5577?
CVE-2006-5577 is an information disclosure vulnerability related to the handling of the OBJECT HTML tag.
Can CVE-2006-5577 be exploited remotely?
Yes, CVE-2006-5577 can be exploited by remote attackers to obtain sensitive information.
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/microsoft
- canonical/microsoft internet explorer
- version/microsoft internet explorer/6