Vulnerability in Microsoft Ie
CVE-2006-7030
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll.
EPSS: 0.165 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions sp2
- Microsoft Windows_98
- Microsoft Windows_me
- Microsoft Windows_nt
- Microsoft Windows_vista
- Microsoft Windows_xp
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)