CVE-2006-0544

high · 7.5

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.

7.5

CVSS

21.7%

EPSS (exploit prob.)

98th

EPSS percentile

2006-02-04

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	ie	7.0

Check a specific version with /api/v1/cve/match.

References

http://www.security-protocols.com/advisory/sp-x23-advisory.txt
http://www.securityfocus.com/bid/16463
http://www.security-protocols.com/advisory/sp-x23-advisory.txt
http://www.securityfocus.com/bid/16463

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-0544