CVE-2006-1992
Internet Explorer - Denial of Service via Nested OBJECT Tags
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1992. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This exploit leverages a memory corruption vulnerability in Microsoft Internet Explorer by using nested OBJECT tags in HTML content. The provided Perl one-liner generates a malicious HTML file that can crash the browser or potentially execute arbitrary code.
Description
mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.
Exploits (1)
This exploit leverages a memory corruption vulnerability in Microsoft Internet Explorer by using nested OBJECT tags in HTML content. The provided Perl one-liner generates a malicious HTML file that can crash the browser or potentially execute arbitrary code.