CVE-2006-3915: Medium severity Microsoft Internet Explorer vulnerability
Published Jul 28, 2006
·Updated
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference.
Affected Software
4 affected components
Microsoft Internet Explorer=6.0
Microsoft Internet Explorer=6.0-sp1
Microsoft Internet Explorer=6.0-sp2
Microsoft Windows XP=sp2
Event History
Jul 28, 2006
CVE Published
12:04 AM
Data Sourced
12:04 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3915?
CVE-2006-3915 has a severity rating of medium due to its potential to cause denial of service by crashing Internet Explorer 6.
2
How do I fix CVE-2006-3915?
To mitigate CVE-2006-3915, users should update to a more recent version of Internet Explorer or apply patches from Microsoft.
3
Which versions of Internet Explorer are affected by CVE-2006-3915?
CVE-2006-3915 affects Internet Explorer 6.0, including versions 6.0-sp1 and 6.0-sp2.
4
What impact does CVE-2006-3915 have on users?
While CVE-2006-3915 primarily causes crashes, it may lead to temporary data loss or disruption of user sessions.