CVE-2006-1245
Microsoft Internet Explorer 6.0.2900.2180 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-1245. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in MSHTML.DLL in Internet Explorer 6. The PoC uses a recursive string concatenation in JavaScript to trigger the overflow, potentially leading to a crash or remote code execution.
Description
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
Exploits (2)
This exploit leverages a buffer overflow vulnerability in MSHTML.DLL in Internet Explorer 6. The PoC uses a recursive string concatenation in JavaScript to trigger the overflow, potentially leading to a crash or remote code execution.
This is a proof-of-concept exploit for CVE-2006-1245, which targets a vulnerability in Internet Explorer. The exploit uses malformed HTML tags to trigger a memory corruption issue, potentially leading to remote code execution.