Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2006-0057

EPSS 25.06% · P96
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-0057

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Internet Explorer ActiveX控件禁止设置绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Internet Explorer是Microsoft开发的非常流行的WEB浏览器,它提供对ActiveX控件的支持以实现强大的交互功能。 Internet Explorer处理ActiveX的执行时存在漏洞,攻击者可能绕过某个ActiveX的禁止设置获得非授权的执行。当某个ActiveX控件被发现存在漏洞时,用户可以在IE里设置禁止执行此控件,在执行控件前IE会检查特定的注册表键值以决定是否执行,如果为特定的值,则不执行。IE被发现存在漏洞,特定构造的HTML页面可以绕过IE的禁止设置,使恶意Activ
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-0057

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-0057

登录查看更多情报信息。

Same Patch Batch · n/a · 2006-01-27 · 20 CVEs total

CVE-2006-0464IdeoContent Manager index.php 多个SQL注入漏洞
CVE-2006-0450phpBB 2.0.19 拒绝服务漏洞
CVE-2006-0449E-Post MailServer 拒绝服务漏洞
CVE-2006-0448E-Post MailServer 多个目录遍历漏洞
CVE-2006-0447E-Post MailServer 多个缓存区溢出漏洞
CVE-2006-0446WeBWorK未明漏洞
CVE-2002-1573Linux kernel pcilynx ieee1394 firewire驱动程序(pcilynx.c)未知影响和攻击向量漏洞
CVE-2002-1572Linux kernel带符号整数溢出漏洞
CVE-2006-0466Goldstag Content Management System search.asp 跨站脚本攻击漏洞
CVE-2006-0465active121 Site Manager risultati_ricerca.php 跨站脚本攻击漏洞
CVE-2005-4670CityPost PHP LNKX Message.PHP跨站脚本攻击漏洞
CVE-2006-0463IdeoContent Manager 跨站脚本攻击漏洞
CVE-2006-0462AndoNET Blog Comentarios.PHP SQL注入漏洞
CVE-2006-0461PMachine ExpressionEngine 跨站脚本攻击漏洞
CVE-2005-4675Complete PHP Counter跨站脚本攻击漏洞
CVE-2005-4674Complete PHP Counter list.php远程SQL注入漏洞
CVE-2005-4673IOFTPD用户名列举漏洞
CVE-2005-4672CityPost Simple Image-Editor 'image-editor-52/index.php'跨站脚本攻击漏洞
CVE-2005-4671CityPost Simple PHP Upload Simple-upload-53.PHP跨站脚本攻击漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2006-0057

No comments yet


Leave a comment