CVE-2006-5578
First published: Tue Dec 12 2006(Updated: )
Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5577.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Explorer | <=6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1017374
- http://secunia.com/advisories/23288
- http://www.osvdb.org/30815
- http://www.securityfocus.com/bid/21494
- http://www.kb.cert.org/vuls/id/694344
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html
- http://www.vupen.com/english/advisories/2006/4966
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A337
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
Frequently Asked Questions
What is the severity of CVE-2006-5578?
CVE-2006-5578 is considered a moderate severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2006-5578?
To fix CVE-2006-5578, users should upgrade to a newer version of Internet Explorer or apply any available security patches from Microsoft.
What types of systems are affected by CVE-2006-5578?
CVE-2006-5578 affects Microsoft Internet Explorer 6 and earlier versions on Windows Server 2003 SP1 and similar platforms.
What kind of information can be disclosed due to CVE-2006-5578?
CVE-2006-5578 allows attackers to read Temporary Internet Files, which may contain sensitive user information.
Can CVE-2006-5578 be exploited remotely?
Yes, CVE-2006-5578 can be exploited remotely by attackers using specific drag and drop operations.
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft internet explorer
- version/microsoft internet explorer/6