CVE-2006-1245
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other...
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
- Record
CVE-2006-1245- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
- Record
CVE-2006-1245- Updated
- 2026-11-02
EUVDEUVD-2006-1249 No score
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
- Record
EUVD-2006-1249- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j337-57xh-rcw9 No score
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other...
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
- Record
GHSA-j337-57xh-rcw9- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer - HTML Tag Memory Corruption (MS06-013) | 2006-05-27 |
| Exploit-DB | Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow | 2006-03-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1245 is a high vulnerability (CVSS 7.5) in Microsoft Ie, published March 17, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.8%, the 99th percentile. No source names a fixed version.
References
securitytracker.com/id?1015794
securityfocus.com/archive/1/453554/100/0/threaded
secunia.com/advisories/18957
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569
Show 15 moreShow less
us-cert.gov/cas/techalerts/TA06-101A.html
exchange.xforce.ibmcloud.com/vulnerabilities/25292
archives.neohapsis.com/archives/bugtraq/2006-02/0855.html
kb.cert.org/vuls/id/984473
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
vupen.com/english/advisories/2006/1318
osvdb.org/23964
nvd.nist.gov/vuln/detail/CVE-2006-1245
github.com/advisories/GHSA-j337-57xh-rcw9