Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-3915 — Microsoft Internet Explorer vulnerability

3 documents3 sources

Severity

5.0MEDIUMNVD

EPSS

20.3%

top 4.46%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Microsoft Internet Explorer

Timeline

PublishedJul 28

Latest updateMay 1

Description

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer6.0

🔴Vulnerability Details

GHSA

GHSA-3qp6-6r7h-j2c6: Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as↗2022-05-01

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Internet Explorer 6 - Native Function Iterator Denial of Service↗2006-07-24

▶