Vulnerability Details : CVE-2006-5577
Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5578.
Vulnerability category: Information leak
Exploit prediction scoring system (EPSS) score for CVE-2006-5577
Probability of exploitation activity in the next 30 days: 8.08%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 94 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-5577
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
nvd@nist.gov |
References for CVE-2006-5577
- http://securitytracker.com/id?1017374
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072
- http://www.securityfocus.com/archive/1/454969/100/200/threaded
-
http://www.securityfocus.com/bid/21507
-
http://www.us-cert.gov/cas/techalerts/TA06-346A.html
US Government Resource
- http://www.vupen.com/english/advisories/2006/4966
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313
Products affected by CVE-2006-5577
- cpe:2.3:a:microsoft:ie:*:windows_server_2003_sp1:*:*:*:*:*:*