CVE-2006-3471

Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method.

Date published : 2006-07-10

http://www.securityfocus.com/bid/18873

http://browserfun.blogspot.com/2006/07/mobb-7-tableframeset.html