NetSight
IP …
medium5.0Public exploit code

CVE-2006-7065

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

Affected products

VendorProductAffected versions
MicrosoftIe
Versions 6, 6.0, 7, 7.0
MicrosoftInternet Explorer
Versions 6, 6.0, 6.0.2600, 6.0.2800, 6.0.2800.1106, 6.0.2900
CanonNetwork Camera Server Vb101
All versions

References