CVE-2006-7065

medium · 5

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

CVSS

19.9%

EPSS (exploit prob.)

97th

EPSS percentile

2007-03-02

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	6.0
microsoft	ie	7
microsoft	ie	7
microsoft	ie	7
microsoft	ie	7
microsoft	ie	7.0
microsoft	ie	7.0
microsoft	ie	7.0
microsoft	internet_explorer	6
microsoft	internet_explorer	6.0
microsoft	internet_explorer	6.0.2600
microsoft	internet_explorer	6.0.2800
microsoft	internet_explorer	6.0.2800.1106
microsoft	internet_explorer	6.0.2900
microsoft	internet_explorer	6.0.2900.2180
microsoft	internet_explorer	7.0
microsoft	internet_explorer	7.0
microsoft	internet_explorer	7.0
microsoft	internet_explorer	7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-7065