Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Internet Explorer can crash from page with many nested marquees

CVE-2006-6956 · published 19 years ago
Summary

A web page that uses a large number of nested scrolling text elements (marquee tags) can cause Internet Explorer to become unresponsive and stop working. This means a visitor to a malicious site could experience a browser freeze, disrupting work. Update Internet Explorer to the latest version or restrict use of outdated browsers to avoid the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft internet_explorer All versions
cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*
Original advisory text
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723.
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
11% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published29 Jan 2007
Updated16 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-6956 · NVD
Track software like this
Free during beta