CVE-2006-1388

Microsoft Internet Explorer 6.0 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1388. PoCs published by Thomas Waldegger.

AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2006-1359, which targets a vulnerability in Internet Explorer. The exploit uses malformed HTML tags to trigger a denial-of-service condition.

Description

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Thomas Waldegger · htmldoswindows
https://www.exploit-db.com/exploits/1838

This is a proof-of-concept exploit for CVE-2006-1359, which targets a vulnerability in Internet Explorer. The exploit uses malformed HTML tags to trigger a denial-of-service condition.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Internet Explorer
No auth needed
Prerequisites: Victim must open the malicious HTML file in a vulnerable version of Internet Explorer
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (17)

Core 17
Core References
Various Sources x_refsource_misc
http://jeffrey.vanderstad.net/grasshopper/
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25394
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19378
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/434641
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1774
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA06-101A.html
Third Party Advisory mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17181
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015800
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24095
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1318
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724

Scores

EPSS 0.5512
EPSS Percentile 98.9%

Details

Status published
Products (2)
microsoft/ie 6.0 sp1 (2 CPE variants)
microsoft/internet_explorer 6.0
Published Mar 24, 2006
Tracked Since Feb 18, 2026