CVE-2006-3637: Microsoft Ie

Medium severity, CVSS 5.1. EPSS: 43.8% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."

Affected products

• Microsoft Ie: version 6 only
• Microsoft Internet Explorer: version 5.01 only

Published 2006-08-08. Last modified 2026-06-16.