CVE-2006-1186

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

58.26% chance of exploitation in the next 30 days, 99th percentile

Published

2006-04-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1838

Security advisories

• http://secunia.com/advisories/18957
• http://www.kb.cert.org/vuls/id/959049
• http://www.securityfocus.com/bid/17453
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013

References

• CVE Record
• NVD entry