cve.bz

Microsoft Patch Tuesday, December 2006: the CVEs

Filter

Microsoft Patch Tuesday December 2006: the CVEs Microsoft published on 12 December 2006, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Nov 2006, Oct 2006, Sep 2006, Aug 2006, Jul 2006, Jun 2006, May 2006, Apr 2006, Mar 2006, Feb 2006, Jan 2006, Dec 2005. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. –CVE-2006-5583EPSS 55%

    Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption V…

  2. –CVE-2006-5581EPSS 38%

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHT…

  3. –CVE-2006-5579EPSS 33%

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruptio…

  4. –CVE-2006-5578EPSS 23%

    Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Discl…

  5. –CVE-2006-5577EPSS 27%

    Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information D…