CVE-2006-3451 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-3451
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3451

Description: Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

CVE Status: Candidate

References: ST 1016663 SREASON http://securityreason.com/securityalert/1343 SAID Secunia Advisory: SA21396 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5 OSVDB 27854 MS http://www.microsoft.com/technet/security/bulletin/ms06-042.mspx MISC http://www.zerodayinitiative.com/advisories/ZDI-06-026.html CERT-VN 262004 CERT http://www.us-cert.gov/cas/techalerts/TA06-220A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/442578/100/0/threaded BID 19316

Return to the previous page.