CVE-2006-1016
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 67%
from disclosure to weapon1524 days
Published on NVDMar 7
1st PoC+1524d
metasploitFeb 24
exploitation probability
67%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16549unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.