CVE-2006-5578

Microsoft Internet Explorer < 6 - Information Disclosure via Drag and Drop Operations

Title source: llm

Description

Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5577.

References (10)

Core 10

Core References

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4966

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23288

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/694344

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A337

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-346A.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017374

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/21494

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://www.securityfocus.com/archive/1/454969/100/200/threaded

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/30815

Scores

EPSS 0.2177

EPSS Percentile 97.4%

Details

Status published

Products (1)

microsoft/ie < 6

Published Dec 12, 2006

Tracked Since Feb 18, 2026