Skip to main content
← All vulnerabilities
CVE-2006-3605

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitia

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference.

Timeline

  1. Public exploit on Exploit-DB

    EDB-28213

  2. CVE published
  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 6

osvdb.org

exchange.xforce.ibmcloud.com

vupen.com

securityfocus.com

browserfun.blogspot.com

Exploit-DB