cve/2006/CVE-2006-3451.md

CVE-2006-3451

Description

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

POC

Reference

• http://securityreason.com/securityalert/1343
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042

Github

No PoCs found on GitHub currently.