CVE-2006-3640

CVE Database · CVE-2006-3640

CVE-2006-3640

· N/AModified

CVSS v3.1

N/A

EPSS

24.88%

Published

Aug 8, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited web pages in other domains or zones, aka "Window Location Information Disclosure Vulnerability."

Affected Products (2)

microsoft · ievulnerable

microsoft · internet_explorervulnerable

References (14)

http://secunia.com/advisories/21396

http://securitytracker.com/id?1016663

http://www.osvdb.org/27850

http://www.securityfocus.com/bid/19339

http://www.vupen.com/english/advisories/2006/3212

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A171

http://secunia.com/advisories/21396

http://securitytracker.com/id?1016663

http://www.osvdb.org/27850

http://www.securityfocus.com/bid/19339

http://www.vupen.com/english/advisories/2006/3212

KEV Catalog EPSS Scores Vendors All CVEs