CVE-2006-3471

Microsoft Internet Explorer 6 on Windows XP - DoS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3471. PoCs published by Aviv Raff.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) vulnerability in Internet Explorer 6 by triggering a crash via improper handling of nested HTML elements (table and frameset). The PoC uses JavaScript to dynamically create and append these elements, causing a null pointer dereference.

Description

Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Aviv Raff · htmldoswindows
https://www.exploit-db.com/exploits/1989

This exploit demonstrates a denial-of-service (DoS) vulnerability in Internet Explorer 6 by triggering a crash via improper handling of nested HTML elements (table and frameset). The PoC uses JavaScript to dynamically create and append these elements, causing a null pointer dereference.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Internet Explorer 6 on Windows XP SP2
No auth needed
Prerequisites: Internet Explorer 6 on Windows XP SP2
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/26837
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27592
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18873
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2701

Scores

EPSS 0.2078
EPSS Percentile 97.2%

Details

Status published
Products (1)
microsoft/ie 6.0 (2 CPE variants)
Published Jul 10, 2006
Tracked Since Feb 18, 2026