CVE-2003-1505: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 12.9% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.

Affected products

• Microsoft Internet Explorer: version 6 only

Published 2003-12-31. Last modified 2026-06-16.