cvelist/2006/1xxx/CVE-2006-1245.json

{
    "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2006-1245",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "n/a",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "n/a"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "n/a"
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the \"Multiple Event Handler Memory Corruption Vulnerability.\""
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "n/a"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "name": "1015794",
                "refsource": "SECTRACK",
                "url": "http://securitytracker.com/id?1015794"
            },
            {
                "name": "20061205 Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit",
                "refsource": "BUGTRAQ",
                "url": "http://www.securityfocus.com/archive/1/453554/100/0/threaded"
            },
            {
                "name": "18957",
                "refsource": "SECUNIA",
                "url": "http://secunia.com/advisories/18957"
            },
            {
                "name": "oval:org.mitre.oval:def:1569",
                "refsource": "OVAL",
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569"
            },
            {
                "name": "19269",
                "refsource": "SECUNIA",
                "url": "http://secunia.com/advisories/19269"
            },
            {
                "name": "oval:org.mitre.oval:def:1451",
                "refsource": "OVAL",
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1451"
            },
            {
                "name": "20060325 Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll)",
                "refsource": "BUGTRAQ",
                "url": "http://www.securityfocus.com/archive/1/428810/100/0/threaded"
            },
            {
                "name": "TA06-101A",
                "refsource": "CERT",
                "url": "http://www.us-cert.gov/cas/techalerts/TA06-101A.html"
            },
            {
                "name": "oval:org.mitre.oval:def:1632",
                "refsource": "OVAL",
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1632"
            },
            {
                "name": "ie-mshtml-bo(25292)",
                "refsource": "XF",
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25292"
            },
            {
                "name": "17131",
                "refsource": "BID",
                "url": "http://www.securityfocus.com/bid/17131"
            },
            {
                "name": "20060316 Remote overflow in MSIE script action handlers (mshtml.dll)",
                "refsource": "BUGTRAQ",
                "url": "http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html"
            },
            {
                "name": "oval:org.mitre.oval:def:1599",
                "refsource": "OVAL",
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1599"
            },
            {
                "name": "20061203 MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit",
                "refsource": "BUGTRAQ",
                "url": "http://www.securityfocus.com/archive/1/453436/100/0/threaded"
            },
            {
                "name": "VU#984473",
                "refsource": "CERT-VN",
                "url": "http://www.kb.cert.org/vuls/id/984473"
            },
            {
                "name": "MS06-013",
                "refsource": "MS",
                "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013"
            },
            {
                "name": "oval:org.mitre.oval:def:1766",
                "refsource": "OVAL",
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1766"
            },
            {
                "name": "ADV-2006-1318",
                "refsource": "VUPEN",
                "url": "http://www.vupen.com/english/advisories/2006/1318"
            },
            {
                "name": "23964",
                "refsource": "OSVDB",
                "url": "http://www.osvdb.org/23964"
            }
        ]
    }
}