CVE-2006-3471 Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated usin...
MediumCVSS 5.0
EPSS 20.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0 | No fix listed |
| Microsoft ie | = 6.0-sp1 | No fix listed |
References
- browserfun.blogspot.com
- 26837 vdb-entry
- 18873 vdb-entry
- ADV-2006-2701 vdb-entry
- ie-tableframeset-appendchild-dos(27592) vdb-entry