CVE-2006-4888

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-19 · updated 2026-06-16

Description

Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.

Affected products

Microsoft Ie: through 6

References

http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html
http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/
http://www.osvdb.org/28614
http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html
http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug/
http://www.osvdb.org/28614

Get alerted when CVE-2006-4888 or the next vulnerability affects your stack