CVE-2006-5152

None

CVSS

—

EPSS

10.9%

Published

Oct 5, 2006

CISA due date

—

The record

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.

Affected packages

Ecosystem	Package	Introduced	Fixed