What’s Vulnerable › Vulnerabilities

CVE-2006-1388

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 55.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-03-24 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.

Affected products

• Microsoft Ie: 6.0-sp1, 6.0-sp2
• Microsoft Internet Explorer 11: 6.0

References

• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html
• http://jeffrey.vanderstad.net/grasshopper/
• http://news.zdnet.com/2100-1009_22-6052396.html?tag=zdfd.newsfeed
• http://secunia.com/advisories/19378
• http://securitytracker.com/id?1015800
• http://www.kb.cert.org/vuls/id/434641
• http://www.osvdb.org/24095
• http://www.securityfocus.com/bid/17181
• http://www.us-cert.gov/cas/techalerts/TA06-101A.html
• http://www.vupen.com/english/advisories/2006/1318
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25394

Get alerted when CVE-2006-1388 or the next vulnerability affects your stack