CVEvulnerability
CVE-2006-3450
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.
Affected configurations
• microsoft ie 6.0
• microsoft internet explorer 6.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/21396 Vendor Advisory
- http://securitytracker.com/id?1016663 securitytracker.com
- http://www.kb.cert.org/vuls/id/119180 Patch, US Government Resource
- http://www.osvdb.org/27855 www.osvdb.org
- http://www.securityfocus.com/archive/1/442579/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19312 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/3212 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-027.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433 oval.cisecurity.org
- http://secunia.com/advisories/21396 Vendor Advisory
- http://securitytracker.com/id?1016663 securitytracker.com
- http://www.kb.cert.org/vuls/id/119180 Patch, US Government Resource
- http://www.osvdb.org/27855 www.osvdb.org
- http://www.securityfocus.com/archive/1/442579/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19312 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-220A.html Patch, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/3212 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-027.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433 oval.cisecurity.org