CVE-2006-3898

CVE-2006-3898 describes a denial-of-service vulnerability in Microsoft Internet Explorer 6.0 on Windows XP SP2. Remote attackers can crash the application by invoking the Click method of the Internet.HHCtrl.1 ActiveX object before its URL is initialized, leading to a null dereference. This vulnerability has a CVSS score of 5.0, indicating a medium severity with network access, low attack complexity, no authentication required, and a partial impact on availability. While not listed in CISA's KEV catalog or Hot List, an ExploitDB entry (EDB-28256) exists, suggesting proof-of-concept code is publicly available, though there is no evidence of active exploitation or significant community discussion.