CVE-2006-3643

Description

Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local HTML-embedded resource files in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka MMC Redirect Cross-Site Scripting Vulnerability.

Risk Information

Base Score

8.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

33.08

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows 2000 (KB917008)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234