CVE-2006-5579

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 31.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-12 · updated 2026-06-16
Weakness: CWE-119

Description

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruption Vulnerability."

Affected products

Microsoft Internet Explorer 11: 6

References

http://secunia.com/advisories/20807
http://secunia.com/secunia_research/2006-58/advisory/
http://securitytracker.com/id?1017373
http://www.kb.cert.org/vuls/id/599832
http://www.osvdb.org/30813
http://www.securityfocus.com/archive/1/454205/100/0/threaded
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21552
http://www.us-cert.gov/cas/techalerts/TA06-346A.html
http://www.vupen.com/english/advisories/2006/4966
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A761

Get alerted when CVE-2006-5579 or the next vulnerability affects your stack