CVE-2006-7066

Опубликовано: 02 мар. 2007

Источник: nvd

CVSS2: 7.1

EPSS Средний

Описание

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NULL pointer dereference. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
Broken Link
http://blogs.securiteam.com/index.php/archives/554
Permissions Required
http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
Broken Link
http://websecurity.com.ua/3130/
Third Party Advisory
http://www.osvdb.org/27533
Broken Link
http://www.securityfocus.com/bid/19228
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/28068
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
Broken Link
http://blogs.securiteam.com/index.php/archives/554
Permissions Required
http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
Broken Link
http://websecurity.com.ua/3130/
Third Party Advisory
http://www.osvdb.org/27533
Broken Link
http://www.securityfocus.com/bid/19228
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/28068
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*

Одно из

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.3602

Средний

7.1 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7jhv-xq3r-8h9q

github

почти 4 года назад