CVE-2006-3512: Medium severity Microsoft Internet Explorer vulnerability
Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3512?
CVE-2006-3512 is classified as a denial of service vulnerability that can crash Internet Explorer.
How do I fix CVE-2006-3512?
To mitigate CVE-2006-3512, users should upgrade to a newer version of Internet Explorer or apply available patches.
Which versions of Internet Explorer are affected by CVE-2006-3512?
CVE-2006-3512 affects Internet Explorer 6.0, including its Service Pack versions SP1 and SP2.
What causes the denial of service in CVE-2006-3512?
CVE-2006-3512 is triggered by a null dereference in the DXTFilter ActiveX object when its Enabled property is set to true.
Is Microsoft Windows XP itself vulnerable in CVE-2006-3512?
Microsoft Windows XP is not directly vulnerable in CVE-2006-3512; the vulnerability affects Internet Explorer running on this operating system.