Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll.
Affected Platforms
Microsoft Windows Embedded CompactMicrosoft Windows 98Microsoft Internet ExplorerMicrosoft Windows NtMicrosoft Windows MeMicrosoft Windows XpMicrosoft Windows 95Microsoft Windows 2000Microsoft Windows VistaMicrosoft Windows 2003 Server