← All CVEs

CVE-2006-0585

medium · 5

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference.

5
CVSS
15.2%
EPSS (exploit prob.)
97th
EPSS percentile
2006-02-08
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
microsoftinternet_explorer<= 6
microsoftinternet_explorer3.0
microsoftinternet_explorer3.0.1
microsoftinternet_explorer3.0.2
microsoftinternet_explorer3.1
microsoftinternet_explorer3.2
microsoftinternet_explorer4.0
microsoftinternet_explorer4.0.1
microsoftinternet_explorer4.0.1
microsoftinternet_explorer4.0.1
microsoftinternet_explorer4.01
microsoftinternet_explorer4.1
microsoftinternet_explorer4.01
microsoftinternet_explorer4.5
microsoftinternet_explorer4.40.308
microsoftinternet_explorer4.40.520
microsoftinternet_explorer4.70.1155
microsoftinternet_explorer4.70.1158
microsoftinternet_explorer4.70.1215
microsoftinternet_explorer4.70.1300
microsoftinternet_explorer4.71.544
microsoftinternet_explorer4.71.1008.3
microsoftinternet_explorer4.71.1712.6
microsoftinternet_explorer4.72.2106.8
microsoftinternet_explorer4.72.3110.8
microsoftinternet_explorer4.72.3612.1713
microsoftinternet_explorer5.0
microsoftinternet_explorer5.0.1
microsoftinternet_explorer5.0.1
microsoftinternet_explorer5.0.1
microsoftinternet_explorer5.0.1
microsoftinternet_explorer5.0.1
microsoftinternet_explorer5.00.0518.10
microsoftinternet_explorer5.00.0910.1309
microsoftinternet_explorer5.00.2014.0216
microsoftinternet_explorer5.00.2314.1003
microsoftinternet_explorer5.00.2516.1900
microsoftinternet_explorer5.00.2614.3500
microsoftinternet_explorer5.00.2919.800
microsoftinternet_explorer5.00.2919.3800

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-0585