CVE-2006-0585

CVE-2006-0585 describes a denial-of-service vulnerability in Microsoft Internet Explorer 6.0 SP1 and earlier, specifically within jscript.dll. This flaw allows remote attackers to crash the application through a crafted Shockwave Flash object that leverages ActionScript to call VBScript, which then invokes the Javascript document.write function, leading to a null dereference. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited with low complexity over a network without authentication, resulting in a partial impact on availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.