Description
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
References
- 20060523 Re: Microsoft Internet Explorer - Crash on mouse button click mailing-list
- 20060605 Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability mailing-list
- 20060525 Re: Microsoft Internet Explorer - Crash on mouse button click mailing-list
- 20060520 Microsoft Internet Explorer - Crash on mouse button click mailing-list
- 20060523 RE: Microsoft Internet Explorer - Crash on mouse button click mailing-list
- 20060524 Re: Microsoft Internet Explorer - Crash on mouse button click mailing-list