National Cyber-Alert System

Vulnerability Summary for CVE-2006-1359

Overview

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-101A

Name: TA06-101A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-101A.html

US-CERT Vulnerability Note: VU#876678

Name: VU#876678

Hyperlink:http://www.kb.cert.org/vuls/id/876678

External Source: XF

Name: ie-createtextrange-command-execution(25379)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25379

External Source: BID

Name: 17196

Hyperlink:http://www.securityfocus.com/bid/17196

External Source: BUGTRAQ

Name: 20060328 Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution)

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/429124/30/6120/threaded

External Source: BUGTRAQ

Name: 20060328 EEYE: Temporary workaround for IE createTextRange vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/429088/100/0/threaded

External Source: BUGTRAQ

Name: 20060323 Secunia Research: Microsoft Internet Explorer "createTextRange()"Code Execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428600/100/0/threaded

External Source: BUGTRAQ

Name: 20060322 Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428583/100/0/threaded

External Source: BUGTRAQ

Name: 20060322 IE crash

Hyperlink:http://www.securityfocus.com/archive/1/428441

External Source: OSVDB

Name: 24050

Hyperlink:http://www.osvdb.org/24050

External Source: MS

Name: MS06-013

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-013.mspx

External Source: CONFIRM

Name: http://www.microsoft.com/technet/security/advisory/917077.mspx

Hyperlink:http://www.microsoft.com/technet/security/advisory/917077.mspx

External Source: VUPEN

Name: ADV-2006-1318

Hyperlink:http://www.frsirt.com/english/advisories/2006/1318

External Source: VUPEN

Name: ADV-2006-1050

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/1050

External Source: MISC

Name: http://www.computerterrorism.com/research/ct22-03-2006

Type: Advisory

Hyperlink:http://www.computerterrorism.com/research/ct22-03-2006

External Source: CIAC

Name: Q-154

Hyperlink:http://www.ciac.org/ciac/bulletins/q-154.shtml

External Source: SECTRACK

Name: 1015812

Hyperlink:http://securitytracker.com/id?1015812

External Source: MISC

Name: http://secunia.com/secunia_research/2006-7/advisory/

Hyperlink:http://secunia.com/secunia_research/2006-7/advisory/

External Source: SECUNIA

Name: 18680

Type: Advisory

Hyperlink:http://secunia.com/advisories/18680

External Source: FULLDISC

Name: 20060327 Determina Fix for the IE createTextRange() bug

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1662.html

External Source: FULLDISC

Name: 20060322 FW: [Full-disclosure] IE crash

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1434.html

External Source: FULLDISC

Name: 20060322 Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html

External Source: FULLDISC

Name: 20060322 IE crash

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1427.html

US Government Resource: oval:org.mitre.oval:def:985

Name: oval:org.mitre.oval:def:985

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:985

US Government Resource: oval:org.mitre.oval:def:1702

Name: oval:org.mitre.oval:def:1702

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1702

US Government Resource: oval:org.mitre.oval:def:1678

Name: oval:org.mitre.oval:def:1678

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1678

US Government Resource: oval:org.mitre.oval:def:1657

Name: oval:org.mitre.oval:def:1657

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1657

US Government Resource: oval:org.mitre.oval:def:1178

Name: oval:org.mitre.oval:def:1178

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1178