Read the docs
TI-2006-00568 Aliases CVE-2006-0585GHSA-4c25-hrfv-m2p9

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to…

Priority LOW 39Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference.

Why it matters now

EPSS 0.15235 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 66

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*up to 6VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*3.0VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*3.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*3.2VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*4.0VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*4.0.1 sp1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*4.0.1 sp2VulnerableMicrosoft
  • cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:* Versions up to 6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:* Versions 4.0.1 sp1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:* Versions 4.0.1 sp2 Vulnerable ·Microsoft
Show 56 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*4.01VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*4.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*4.01 sp1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*4.5VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*4.40.308VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*4.40.520VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*4.70.1155VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*4.70.1158VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*4.70.1215VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*4.70.1300VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*4.71.544VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*4.71.1008.3VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*4.71.1712.6VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*4.72.2106.8VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*4.72.3110.8VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*4.72.3612.1713VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*5.0VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*5.0.1 sp1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*5.0.1 sp2VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*5.0.1 sp3VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*5.0.1 sp4VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*5.00.0518.10VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*5.00.0910.1309VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*5.00.2014.0216VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*5.00.2314.1003VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*5.00.2516.1900VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*5.00.2614.3500VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*5.00.2919.800VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*5.00.2919.3800VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*5.00.2919.6307VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*5.00.2920.0000VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*5.00.3103.1000VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*5.00.3105.0106VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*5.00.3314.2101VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*5.00.3315.1000VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*5.00.3502.1000VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*5.00.3700.1000VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*5.01VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*5.1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*5.01 sp1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*5.01 sp2VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*5.01 sp3VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*5.01 sp4VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*5.2.3VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*5.5VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*5.5 previewVulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*5.5 sp1VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*5.5 sp2VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*5.50.3825.1300VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*5.50.4030.2400VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*5.50.4134.0100VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*5.50.4134.0600VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*5.50.4308.2900VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*5.50.4522.1800VulnerableMicrosoft
cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*5.50.4807.2300VulnerableMicrosoft
  • cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:* Versions 4.01 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:* Versions 4.01 sp1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:* Versions 4.40.308 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:* Versions 4.40.520 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:* Versions 4.70.1155 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:* Versions 4.70.1158 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:* Versions 4.70.1215 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:* Versions 4.70.1300 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:* Versions 4.71.544 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:* Versions 4.71.1008.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:* Versions 4.71.1712.6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:* Versions 4.72.2106.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:* Versions 4.72.3110.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:* Versions 4.72.3612.1713 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:* Versions 5.0.1 sp1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:* Versions 5.0.1 sp2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:* Versions 5.0.1 sp3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:* Versions 5.0.1 sp4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:* Versions 5.00.0518.10 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:* Versions 5.00.0910.1309 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:* Versions 5.00.2014.0216 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:* Versions 5.00.2314.1003 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:* Versions 5.00.2516.1900 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:* Versions 5.00.2614.3500 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:* Versions 5.00.2919.800 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:* Versions 5.00.2919.3800 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:* Versions 5.00.2919.6307 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:* Versions 5.00.2920.0000 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:* Versions 5.00.3103.1000 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:* Versions 5.00.3105.0106 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:* Versions 5.00.3314.2101 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:* Versions 5.00.3315.1000 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:* Versions 5.00.3502.1000 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:* Versions 5.00.3700.1000 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:* Versions 5.01 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:* Versions 5.01 sp1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:* Versions 5.01 sp2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:* Versions 5.01 sp3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:* Versions 5.01 sp4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:* Versions 5.2.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:* Versions 5.5 preview Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:* Versions 5.5 sp1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:* Versions 5.5 sp2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:* Versions 5.50.3825.1300 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:* Versions 5.50.4030.2400 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:* Versions 5.50.4134.0100 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:* Versions 5.50.4134.0600 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:* Versions 5.50.4308.2900 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:* Versions 5.50.4522.1800 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:* Versions 5.50.4807.2300 Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0585
  2. 2026-10-03 Alias added: GHSA-4c25-hrfv-m2p9

References

—

  • TI-2015-00277 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-00275 Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-01386 Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01340 Scripting Engine Memory Corruption Vulnerability KEVCVSS 3.1HIGH 8.8
  • TI-2019-00335 Command injection in Microsoft Office KEVCVSS 3.1HIGH 8.8
  • TI-2017-00204 Out-of-bounds write in Microsoft Internet Explorer KEVCVSS 3.1HIGH 8.8
See all 1634 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences