CVE-2006-1359
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
- Affected products
- Internet Explorer
- Microsoft Ie
- = 6.0, 7.0
- Microsoft Internet Explorer
- = 6.0
- Fix
- Available
- CVSS 2.0
- 9.3 HIGH
- EPSS
- 68.1% (99th percentile)
- Weakness
- CWE-94
- NVD status
- Modified
- Published
- 2006-03-23
CVE-2006-1359 at NVD
13 known exploits for CVE-2006-1359
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft Internet Explorer - 'createTextRange()' Code Execution (MS06-013) (Metasploit)
Internet Explorer createTextRange() Code Execution
MS06-013 Microsoft Internet Explorer createTextRange() Code Execution
Microsoft Internet Explorer - HTML Tag Memory Corruption (MS06-013)
Microsoft Internet Explorer - 'createTextRang' Remote (Metasploit)
MS Internet Explorer (createTextRang) Remote Exploit (meta update)
Microsoft Internet Explorer - createTextRang Remote (Metasploit)
Microsoft Internet Explorer - 'createTextRang' Download Shellcode (2)
Internet Explorer createTextRange memory corruption
Internet Explorer createTextRange memory corruption
Internet Explorer createTextRange memory corruption
Internet Explorer createTextRange memory corruption
Microsoft Internet Explorer - 'createTextRang' Remote Code Execution