CVE-2006-1189: Microsoft Internet Explorer

High severity, CVSS 10.0. EPSS: 61.7% chance of exploitation in the next 30 days.

Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory Corruption Vulnerability."

Affected products

• Microsoft Internet Explorer: version 5.01 only; version 5.1 only; version 5.5 only; version 6.0 only

Published 2006-04-11. Last modified 2026-06-16.