CVE-2006-6310: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 15.8% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Microsoft Internet Explorer: up to and including 6.0; version 6.0 only

Published 2006-12-06. Last modified 2026-06-16.