Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2006-3451

Description

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

POC

Reference

- http://securityreason.com/securityalert/1343

- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042

Github

No PoCs found on GitHub currently.