5

CVE-2006-7065

Exploit
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Ie Version 6 Edition microsoft_windows_server_2003_sp1
Microsoft ≫ Ie Version 6 Edition windows_2000
Microsoft ≫ Ie Version 6 Edition windows_server_2003
Microsoft ≫ Ie Version 6 Edition windows_xp_professional_64bit
Microsoft ≫ Ie Version 6 Update sp1 Edition windows_98
Microsoft ≫ Ie Version 6 Update sp1 Edition windows_98_se
Microsoft ≫ Ie Version 6 Update sp1 Edition windows_millennium
Microsoft ≫ Ie Version 6 Update sp1 Edition windows_xpsp1
Microsoft ≫ Ie Version 6 Update windows_2000_sp4
Microsoft ≫ Ie Version 6 Update windows_server_2003_sp1
Microsoft ≫ Ie Version 6 Update windows_server_2003_sp1_itanium
Microsoft ≫ Ie Version 6 Update windows_server_2003_sp1_itanium_systems
Microsoft ≫ Ie Version 6 Update windows_xp_sp2
Microsoft ≫ Ie Version 6.0 Edition windows_server
Microsoft ≫ Ie Version 6.0 Edition windows_server_2003
Microsoft ≫ Ie Version 6.0 Edition windowsxp
Microsoft ≫ Ie Version 6.0 Update sp1
Microsoft ≫ Ie Version 6.0 Update sp1 Edition windows_2000
Microsoft ≫ Ie Version 6.0 Update sp1 Edition windows_xp
Microsoft ≫ Ie Version 6.0 Update sp2
Microsoft ≫ Ie Version 6.0 Update sp2 Edition windows_xp
Microsoft ≫ Ie Version 6.0 Update windows_xp_sp2
Microsoft ≫ Ie Version 7 Edition windows_server_2003
Microsoft ≫ Ie Version 7 Update windows_2000_sp4
Microsoft ≫ Ie Version 7 Update windows_server_2003_sp1
Microsoft ≫ Ie Version 7 Update windows_xp_sp2
Microsoft ≫ Ie Version 7.0 Edition vista
Microsoft ≫ Ie Version 7.0 Update beta_2
Microsoft ≫ Ie Version 7.0 Update windows_xp_sp2
Microsoft ≫ Internet Explorer Version 6 Update sp1
Microsoft ≫ Internet Explorer Version 6.0
Microsoft ≫ Internet Explorer Version 6.0.2600
Microsoft ≫ Internet Explorer Version 6.0.2800
Microsoft ≫ Internet Explorer Version 6.0.2800.1106
Microsoft ≫ Internet Explorer Version 6.0.2900
Microsoft ≫ Internet Explorer Version 6.0.2900.2180
Microsoft ≫ Internet Explorer Version 7.0 Update beta
Microsoft ≫ Internet Explorer Version 7.0 Update beta1
Microsoft ≫ Internet Explorer Version 7.0 Update beta2
Microsoft ≫ Internet Explorer Version 7.0 Update beta3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.93% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.html
Exploit
http://www.securityfocus.com/bid/19364
Vendor Advisory
Exploit
http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511