CVE-2006-3450

HIGH 7.5CVE-2006-3450 · Published 08/08/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
ie microsoft	`= 6.0`	No fix yet
internet explorer microsoft	`= 6.0`	No fix yet

Description

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.

References

secunia.com/advisories/21396 · Vendor Advisory
securitytracker.com/id
kb.cert.org/vuls/id/119180 · Patch
osvdb.org/27855
securityfocus.com/archive/1/442579/100/0/threaded
securityfocus.com/bid/19312 · Patch
us-cert.gov/cas/techalerts/TA06-220A.html · Patch
vupen.com/english/advisories/2006/3212 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-06-027.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A433

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free