Description
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll.
References
- 20060525 [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 mailing-list
- 2286 third-party-advisory
- 18112 vdb-entry
- ie-html-tag-parsing-dos(26808) vdb-entry
- 20060526 Re: [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 mailing-list