CVE-2006-1992

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which…

published April 25, 2006

CVSS

—

EPSS

41%

Percentile

98.7

In the wild

Unconfirmed

What it is

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.40753 · 98.7th percentile
Published: 2006-04-25T01:00Z

EPSS history

Timeline

25 APR 01:00Z
mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which…
cvelistv5