Intrusion PreventionMS.IE.Script.Error.Handling.Memory.Corruption
Description
A remote code execution vulnerability exists in Internet Explorer due to attempt to access previously freed memory when handling script errors in certain situations. An attacker could exploit the vulnerability by constructing a specially crafted Web page. If a user viewed the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Affected Products
Microsoft Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4
Microsoft Internet Explorer 6 Service Pack 1 on Windows 2000 Service Pack 4
Microsoft Internet Explorer 6 for Windows XP Service Pack 2
Microsoft Internet Explorer 6 for Windows XP Professional x64 Edition
Microsoft Internet Explorer 6 for Windows Server 2003
Microsoft Internet Explorer 6 for Windows Server 2003 Service Pack 1
Microsoft Internet Explorer 6 for Windows Server 2003 (Itanium)
Microsoft Internet Explorer 6 for Windows Server 2003 with SP1 (Itanium)
Microsoft Internet Explorer 6 for Windows Server 2003 x64 Edition
Impact
Arbitrary code execution
Recommended Actions
Apply patches:
http://www.microsoft.com/technet/security/Bulletin/MS06-072.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 13683 |
| Created | Dec 12, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-5579 |
| Exploit Prediction Score | 81.01% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IE |