CVE-2004-0479: Undefined Security Weakness

Internet Explorer 6 allows remote attackers to cause a denial of service crash via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference...