CVE-2006-5577

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-12 · updated 2026-06-16

Description

Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5578.

Affected products

Microsoft Ie: through 6

References

http://secunia.com/advisories/23288
http://securitytracker.com/id?1017374
http://www.osvdb.org/30816
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21507
http://www.us-cert.gov/cas/techalerts/TA06-346A.html
http://www.vupen.com/english/advisories/2006/4966
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313
http://secunia.com/advisories/23288
http://securitytracker.com/id?1017374
http://www.osvdb.org/30816

Get alerted when CVE-2006-5577 or the next vulnerability affects your stack