high7.1Public exploit code
CVE-2006-7066
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 6 - Deleted Frame Object Denial of Service2006-07-29 · dos · windows · Verified
Impact
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NULL pointer dereference. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 6.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
- http://blogs.securiteam.com/index.php/archives/554
- http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
- http://websecurity.com.ua/3130/
- http://www.osvdb.org/27533
- http://www.securityfocus.com/bid/19228
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28068
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
- http://blogs.securiteam.com/index.php/archives/554
- http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
- http://websecurity.com.ua/3130/
- http://www.osvdb.org/27533
- http://www.securityfocus.com/bid/19228
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28068