Vulnerability Note VU#959649
Microsoft Internet Explorer fails to properly handle embedded objects
Microsoft Internet Explorer (IE) does not properly handle embedded dynamic objects. This vulnerability may allow a remote attacker to execute arbitrary code.
According to Microsoft Security Bulletin MS06-013,
IE fails to properly handle embedded dynamic objects allowing a remote attacker to gain access to IOleClientSite information. An attacker may be able to leverage that information in a way that could allow them to bypass IE security settings.
More information is available in Microsoft Security Bulletin MS06-013.
By convincing a user to open a specially crafted web page, a remote unauthenticated attacker can execute arbitrary code on a vulnerable.
Apply an Update
Refer to Microsoft Security Bulletin MS06-013 for workarounds for this vulnerability.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||11 Apr 2006|
CVSS Metrics (Learn More)
This document was written by Jeff Gennari.
- CVE IDs: CVE-2006-1190
- Date Public: 11 Apr 2006
- Date First Published: 11 Apr 2006
- Date Last Updated: 11 Apr 2006
- Severity Metric: 9.45
- Document Revision: 12
If you have feedback, comments, or additional information about this vulnerability, please send us email.