Vulnerability record · CVE-2006-1359 · published 23 March 2006
CVE-2006-1359: Internet Explorer createTextRange checkbox flaw allows code execution
Microsoft · Ie
Microsoft Internet Explorer 6 and 7 Beta 2 mishandle a createTextRange call on a checkbox object, dereferencing an invalid table pointer. This can crash the browser and, per the description, possibly allow arbitrary code execution. It matters because IE was widely deployed and the flaw is reachable from a web page.
Description
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
AV:N/AC:M/Au:N/C:C/I:C/A:C
Automated analysis
high priorityThe flaw is remotely reachable, has a high CVSS impact and high EPSS, and public exploit code is referenced, though it is not in KEV and affects legacy IE versions.
What it is
Microsoft Internet Explorer 6 and 7 Beta 2 mishandle a createTextRange call on a checkbox object, dereferencing an invalid table pointer. This can crash the browser and, per the description, possibly allow arbitrary code execution. It matters because IE was widely deployed and the flaw is reachable from a web page.
Impact
An attacker can cause a denial of service and potentially execute arbitrary code in the context of the browsing user. Successful exploitation would give the attacker the user's privileges on the workstation.
Attack surface
Reached remotely over the network by a victim visiting a crafted web page; no authentication is required. The CVSS vector shows medium access complexity, and the description implies the victim must load the malicious content, so some user interaction is needed.
Exploitation
Not listed in CISA KEV, but EPSS is high (0.68337, 99.3rd percentile) and a SecurityFocus reference is tagged Exploit, indicating public exploit code exists.
What to do
- Apply Microsoft security bulletin MS06-013, which addresses this issue.
- Upgrade from Internet Explorer 6/7 Beta 2 to a current, supported browser.
- Restrict or block untrusted web content and consider disabling Active Scripting where feasible.
- Enforce network controls that prevent users from reaching known malicious or untrusted sites.
Detection
- Monitor for IE crashes or abnormal process termination tied to web browsing.
- Hunt for suspicious child processes spawned by iexplore.exe.
- Review proxy and DNS logs for access to known exploit-hosting domains.
- Use endpoint telemetry to flag memory corruption or code injection behavior in IE processes.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2006-1359 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2006-1359), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
