CVE-2006-3451 - Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors

Back Back to CVE browser

HIGH

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors

Published Aug 8, 2006

7.5

HIGH

CVSS 2.0

EPSS 41.22%

Description

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (13)

http://secunia.com/advisories/21396
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1343
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016663
vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/262004
third-party-advisoryx_refsource_CERT-VNPatchUS Government Resource
http://www.osvdb.org/27854
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/442578/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19316
vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA06-220A.html
third-party-advisoryx_refsource_CERTPatchUS Government Resource
http://www.vupen.com/english/advisories/2006/3212
vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-026.html
x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3447
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/21396		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1343		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016663		vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/262004		third-party-advisoryx_refsource_CERT-VNPatchUS Government Resource
http://www.osvdb.org/27854		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/442578/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19316		vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA06-220A.html		third-party-advisoryx_refsource_CERTPatchUS Government Resource
http://www.vupen.com/english/advisories/2006/3212		vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-026.html		x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3447		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5		vdb-entrysignaturex_refsource_OVAL