CVE-2006-3451

EPSS 54.48%
Veröffentlicht 08.08.2006 23:04:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 15

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Ie Version5.0 Updatesp4

Microsoft ≫ Ie Version6 Updatewindows_server_2003_sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	54.48%	0.98

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.vupen.com/english/advisories/2006/3212

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Patch

US Government Resource

http://secunia.com/advisories/21396

Vendor Advisory

http://securitytracker.com/id?1016663

http://securityreason.com/securityalert/1343

http://www.kb.cert.org/vuls/id/262004

Patch