CVE-2006-1186

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 58.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-11 · updated 2026-06-16

Description

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.

Affected products

Microsoft Ie: 5.0.1, 5.01-windows_2000_sp4, 6-windows_server_2003_sp1
Microsoft Internet Explorer 11: 5.0.1, 5.0.1-sp1, 5.0.1-sp2, 5.0.1-sp3, 5.0.1-sp4, 5.01 (+9)

References

http://secunia.com/advisories/18957
http://securitytracker.com/id?1015900
http://www.kb.cert.org/vuls/id/959049
http://www.securityfocus.com/bid/17453
http://www.us-cert.gov/cas/techalerts/TA06-101A.html
http://www.vupen.com/english/advisories/2006/1318
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
https://exchange.xforce.ibmcloud.com/vulnerabilities/25545
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1446
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1589
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1651
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1704

Get alerted when CVE-2006-1186 or the next vulnerability affects your stack