CVE-2006-1359: Microsoft Ie

High severity, CVSS 9.3. EPSS: 68.3% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

Affected products

• Microsoft Ie: version 6.0 only; version 7.0 only
• Microsoft Internet Explorer: version 6.0 only

Published 2006-03-23. Last modified 2026-06-16.