CVE-2006-0585: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 15.2% chance of exploitation in the next 30 days.

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference.

Affected products

• Microsoft Internet Explorer: up to and including 6; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.1 only; version 3.2 only; …

Published 2006-02-08. Last modified 2026-06-16.