VULNERABILITY INTELLIGENCE

CVE-2006-3450

CVSS score7.5 HIGH
EPSS probability41.11%
CISA KEVNot currently listed
Published2006-08-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references