CVE-2006-2766

Microsoft Internet Explorer 6.0-6.0 SP2 - Denial of Service via Long mhtml URI in URL File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2766. PoCs published by Mr.Niega.

AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in the handling of MHTML URLs in Internet Explorer. The excessively long 'mid:' parameter in the URL triggers the overflow, potentially leading to remote code execution.

Description

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mr.Niega · textdoswindows

https://www.exploit-db.com/exploits/27930

View Code ZIP pw:eip

This exploit leverages a buffer overflow vulnerability in the handling of MHTML URLs in Internet Explorer. The excessively long 'mid:' parameter in the URL triggers the overflow, potentially leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Microsoft Internet Explorer 6.0

No auth needed

Prerequisites: Victim must open the malicious URL in a vulnerable version of Internet Explorer

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435492/100/0/threaded

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/891204

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20384

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/2088

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/26810

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/25949

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A441

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016654

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435609/100/0/threaded

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-043

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/18198

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435616/100/0/threaded

Scores

EPSS 0.7021

EPSS Percentile 98.7%

Details

Status published

Products (3)

microsoft/ie 6.0 sp1 (2 CPE variants)

microsoft/internet_explorer 6.0

microsoft/internet_explorer 7.0 beta1 (2 CPE variants)

Published Jun 02, 2006

Tracked Since Feb 18, 2026