Lucene search

K
cve[email protected]CVE-2006-0830
HistoryFeb 21, 2006 - 11:02 p.m.

CVE-2006-0830

2006-02-2123:02:00
web.nvd.nist.gov
25
internet explorer
scripting engine
remote attackers
denial of service
arbitrary code
cve-2006-0830
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the “location” variable within the loop.

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6.0.2900

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

Related for CVE-2006-0830