CVE-2006-2218

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 33.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-05 · updated 2026-06-16

Description

Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.

Affected products

Microsoft Internet Explorer 11: 6.0

References

http://secunia.com/advisories/19762
http://secunia.com/secunia_research/2006-41/advisory
http://securitytracker.com/id?1016291
http://www.kb.cert.org/vuls/id/338828
http://www.osvdb.org/27475
http://www.securityfocus.com/archive/1/437099/100/0/threaded
http://www.securityfocus.com/bid/17820
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://www.vupen.com/english/advisories/2006/2319
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728

Get alerted when CVE-2006-2218 or the next vulnerability affects your stack