CVE-2006-3471

Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

20.78% chance of exploitation in the next 30 days, 97th percentile

Published

2006-07-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1989

References

• CVE Record
• NVD entry

Related

• CVE-2006-3469
• CVE-2006-3472
• CVE-2006-3468
• CVE-2006-3474
• CVE-2006-3459
• CVE-2006-3475