Lucene search

K
cve[email protected]CVE-2006-0544
HistoryFeb 04, 2006 - 2:02 a.m.

CVE-2006-0544

2006-02-0402:02:00
NVD-CWE-Other
web.nvd.nist.gov
22
cve-2006-0544
microsoft
internet explorer
denial of service
arbitrary code execution
security vulnerability

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.687 Medium

EPSS

Percentile

97.9%

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to β€œfile://” followed by a large number of β€œ-” (dash of hyphen) characters.

CPENameOperatorVersion
microsoft:iemicrosoft ieeq7.0

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.687 Medium

EPSS

Percentile

97.9%

Related for CVE-2006-0544