Thursday, June 01, 2006

Three New IE6 Vulnerabilities

Several new vulnerabilities have been announced in Internet Explorer 6, which could cause the popular Microsoft browser to crash.

The first of these problems concerns a vulnerability on trying to obtain the value pointed to by a null pointer causing the browser to crash.

When creating an empty applet tag prior to any other HTML tag without closing it, Internet Explorer will have a Null Pointer result and, without closing the tag, will crash.

A second problem has been announced, which occurs when trying to enter an infinite loop. This causes Internet Explorer to close and display an "unknown software exception".

Finally, a denial of service problem has been announced when a frame with certain conditions is created and the user clicks on the frame.