CVE-2006-2382: Microsoft Internet Explorer

High severity, CVSS 10.0. EPSS: 48.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."

Affected products

• Microsoft Internet Explorer: version 5.01 only; version 6 only

Published 2006-06-13. Last modified 2026-06-16.