CVE-2006-3450: Improper Input Validation

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet CSS elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file...

CVE-2004-0842: Undefined Security Weakness

Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service application crash from "memory corruption" via certain malformed Cascading Style Sheet CSS elements that trigger heap-based buffer overflows, as demonstrated using the "...