CVE-2006-3605 Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Objec...
MediumCVSS 5.0
EPSS 24.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 6.0-sp2 | No fix listed |
References
- browserfun.blogspot.com broken-link
- 27057 broken-link vdb-entry
- 18960 exploit third-party-advisory vdb-entry
- ADV-2006-2793 not-applicable vdb-entry
- ie-revealtrans-dos(27713) third-party-advisory vdb-entry