{"id":"CVE-2006-2218","aliases":["EUVD-2006-2219","GHSA-37wg-v9p2-chv7"],"status":"published","title":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote...","description":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.33067,"percentile":0.98373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-05-05T10:00:00Z","modified":"2026-06-16T22:24:34Z","products":[{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1961","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://secunia.com/secunia_research/2006-41/advisory","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/2319","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016291","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-164A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/437099/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/17820","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1078","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.osvdb.org/27475","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1845","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/338828","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1728","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1765","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://secunia.com/advisories/19762","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2218"},{"url":"https://github.com/advisories/GHSA-37wg-v9p2-chv7"}],"sources":{"cve":[{"id":"CVE-2006-2218","description":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.","status":"published","published":"2006-05-05T10:00:00Z","modified":"2024-08-07T17:43:28.024Z","updated_at":"2026-11-02T14:33:48.500736Z"}],"euvd":[{"id":"EUVD-2006-2219","description":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.","status":"published","published":"2006-05-05T10:00:00Z","modified":"2024-08-07T17:43:28Z","updated_at":"2026-11-03T01:16:01.8348Z"}],"ghsa":[{"id":"GHSA-37wg-v9p2-chv7","title":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote...","description":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.","status":"published","published":"2022-05-01T06:56:59Z","modified":"2023-01-31T05:01:06Z","updated_at":"2026-11-02T14:47:59.599725Z"}],"nvd":[{"id":"CVE-2006-2218","description":"Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via \"exceptional conditions\" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.","status":"published","published":"2006-05-05T12:46:00Z","modified":"2026-06-16T22:24:34.943Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:02.98271Z"}]}}