Internet Explorer 6 allows remote malicious users to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS) property.
microsoft ie 6