CVE-2006-5577 : Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sens

Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5578.

Published 2006-12-12 20:28:00

Updated 2018-10-17 21:43:49

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2006-5577

Microsoft » IE » Update Windows Server 2003 Sp1
Versions up to, including, (<=) 6
cpe:2.3:a:microsoft:ie:*:windows_server_2003_sp1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-5577

EPSS FAQ

4.74%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-5577

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2006-5577

Jump to

Vulnerability Details : CVE-2006-5577

Products affected by CVE-2006-5577

Exploit prediction scoring system (EPSS) score for CVE-2006-5577

CVSS scores for CVE-2006-5577

References for CVE-2006-5577