Lucene search
HistoryFeb 23, 2007 - 3:28 a.m.
CVE-2006-7030
cve-2006-7030
microsoft internet explorer
remote attackers
denial of service
crash
malformed html
applet
base tags
null pointer dereference
mshtml.dll
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.508 Medium
EPSS
Percentile
97.5%
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll.
Affected configurations
Node
microsoftwindows_2000
ORmicrosoftwindows_2003_serverMatchsp2
ORmicrosoftwindows_98gold
ORmicrosoftwindows_me
ORmicrosoftwindows_nt
ORmicrosoftwindows_vista
ORmicrosoftwindows_xpgold
microsoftieMatch6.0sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:ie | microsoft ie | eq | 6.0 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.508 Medium
EPSS
Percentile
97.5%
Related for CVE-2006-7030