Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-3512 — Microsoft Internet Explorer vulnerability

3 documents3 sources

Severity

5.0MEDIUMNVD

EPSS

24.8%

top 3.83%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Microsoft Internet Explorer

Timeline

PublishedJul 11

Latest updateMay 1

Description

Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer6.0

🔴Vulnerability Details

GHSA

GHSA-8rpf-98v9-mw3h: Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX↗2022-05-01

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Internet Explorer 6 - Object.Microsoft.DXTFilter Denial of Service↗2006-07-09

▶