Vulnerability in N/a

CVE-2006-1992

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the poss…

EPSS: 0.556 (98.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

20060423 MSIE (mshtml.dll) OBJECT tag vulnerability (mailing-list, x_refsource_FULLDISC)
781 (x_refsource_SREASON, third-party-advisory)
1016001 (vdb-entry, x_refsource_SECTRACK)
1016291 (vdb-entry, x_refsource_SECTRACK)
20060422 MSIE (mshtml.dll) OBJECT tag vulnerability (mailing-list, x_refsource_BUGTRAQ)
27475 (x_refsource_OSVDB, vdb-entry)
20060422 Re: MSIE (mshtml.dll) OBJECT tag vulnerability (mailing-list, x_refsource_FULLDISC)
ADV-2006-1507 (vdb-entry, x_refsource_VUPEN)
MS06-021 (x_refsource_MS, vendor-advisory)
19762 (x_refsource_SECUNIA, third-party-advisory)