Exploitation Summary
CVE-2006-1359 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including Metasploit, Randy Flood, ATmaCA, including a Metasploit module exploits/windows/browser/ms06_013_createtextrange.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2006-1359, a memory corruption vulnerability in Internet Explorer 6 and 7 (Beta 2) via the createTextRange() method. It uses heap spraying to achieve remote code execution on Windows XP SP2.
Description
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
Exploits (6)
This is a Metasploit module exploiting CVE-2006-1359, a memory corruption vulnerability in Internet Explorer 6 and 7 (Beta 2) via the createTextRange() method. It uses heap spraying to achieve remote code execution on Windows XP SP2.
This is a Metasploit module exploiting CVE-2006-1359, a code execution vulnerability in Internet Explorer 6 and 7 via the createTextRange() method. It uses heap spraying to achieve remote code execution on Windows XP SP2.
This exploit leverages a heap spraying technique to achieve remote code execution in Microsoft Internet Explorer 6.x and 7 Beta 2 via the 'createTextRange' vulnerability. It generates a malicious HTML file that, when opened, triggers the exploit and executes shellcode.
This exploit leverages a heap spray technique to overwrite EIP in Internet Explorer 6.x and IE7 Beta 2, executing shellcode (calc.exe) via a JavaScript-based memory corruption vulnerability. The PoC fills heap memory with NOPs and shellcode to redirect execution flow.
This is a proof-of-concept exploit for CVE-2006-1359, which targets a vulnerability in Internet Explorer. The exploit uses malformed HTML tags to trigger a denial-of-service condition.
This Metasploit module exploits a memory corruption vulnerability in Microsoft Internet Explorer (CVE-2006-1359) via the createTextRange() method, leading to arbitrary code execution. It uses heap spraying to achieve reliability and targets IE6 and IE7 on Windows XP SP2.