PT-2006-5642 · Microsoft · Internet Explorer

Published 2006-09-19 · Updated 2008-09-05 · CVE-2006-4888

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application hang. This occurs when a CSS-formatted HTML INPUT element is placed within a DIV element that has a larger size than the INPUT.

Recommendations For Microsoft Internet Explorer versions 6 and earlier, consider avoiding the use of CSS-formatted HTML INPUT elements within larger DIV elements until a fix is available. As a temporary workaround, restrict the size of DIV elements to match or be smaller than the INPUT elements they contain.

Fix

Related Identifiers

CVE-2006-4888

Affected Products

Internet Explorer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-4888 · Security Note
• http://osvdb.org/28614 · Note
• http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html · Note