CVE-2006-3451 in Internet Explorer

Summary

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 07/07/2006
• Disclosure: 08/08/2006
• Moderation: VulDB entry created
• Entries: VDB-2439 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 6.3
• EPSS: 0.64171
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-3451
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-3451
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-3451/