CVE-2006-3545: Medium severity Microsoft Internet Explorer vulnerability

Published Jul 13, 2006

Updated

DISPUTED Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple empty APPLET start tags. NOTE: a third party has disputed this issue, stating that the crash does not occur with Microsoft Internet Explorer 7.0 Beta3.

Affected Software

3 affected components

Microsoft Internet Explorer=7.0-beta

Microsoft Internet Explorer=7.0-beta1

Microsoft Internet Explorer=7.0-beta2

Event History

Jul 13, 2006

CVE Published

12:05 AM

Disputed

12:05 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3545?

CVE-2006-3545 is considered a denial of service vulnerability that can lead to application crashes.

How do I fix CVE-2006-3545?

To mitigate CVE-2006-3545, avoid using Internet Explorer 7.0 Beta and switch to a stable version of the browser.

What versions of Internet Explorer are affected by CVE-2006-3545?

CVE-2006-3545 affects Microsoft Internet Explorer 7.0 Beta, including beta1 and beta2 versions.

Is CVE-2006-3545 still a concern today?

CVE-2006-3545 is generally not a concern today due to the obsolescence of the affected software.

What types of attacks does CVE-2006-3545 enable?

CVE-2006-3545 enables remote attackers to cause a denial of service by exploiting the web page with improper APPLET tag usage.