CVE-2006-1313 json
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objec…
published 2006-06-13 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1317
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 29.3%
- EPSS 29.3% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
Patch / fix
- securityfocus.com/bid/18359 patch
- secunia.com/advisories/20620 advisory
Exploit prediction
29.32% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/18359
vdb-entry, patch
-
secunia.com
/advisories/20620
third-party-advisory, patch, vendor-advisory
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2006/ms06-023
vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644
vdb-entry, signature
-
securitytracker.com
/id?1016283
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26805
vdb-entry
-
vupen.com
/english/advisories/2006/2321
vdb-entry
-
us-cert.gov
/cas/techalerts/TA06-164A.html
third-party-advisory, us-government-resource
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067
vdb-entry, signature
-
kb.cert.org
/vuls/id/390044
third-party-advisory, us-government-resource
-
osvdb.org
/26434
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003
vdb-entry, signature
Sources
- CVE List CVE-2006-1313
- NVD CVE-2006-1313
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.