CVE-2006-1016

Published: Mar 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.

Affected (1)

Products: Microsoft: Internet Explorer

1 product

Internet Explorer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6.0

References (8)

http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled

Source: cve@mitre.org

http://www.metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/16870

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24923

Source: cve@mitre.org

http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/16870

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24923

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.