Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.218
EPSS Ranking 95.5%