CVE-2006-3591 Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been init...
MediumCVSS 5.0
EPSS 26.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 6.0-sp2 | No fix listed |
References
- browserfun.blogspot.com broken-link
- 27056 broken-link vdb-entry
- 18946 exploit third-party-advisory vdb-entry
- ADV-2006-2765 not-applicable vdb-entry
- ie-trieditdocument-dos(27675) third-party-advisory vdb-entry