PT-2006-1877 · Microsoft · Internet Explorer

Publicado 2006-02-21 · Atualizado 2021-07-23 · CVE-2006-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified)

Description The issue concerns the scripting engine in Internet Explorer, which can be exploited by remote attackers through a web page containing a recurrent call to an infinite loop in Javascript or VBscript. This can lead to a denial of service due to resource consumption and potentially allow the execution of arbitrary code. The exploitation is demonstrated by resetting the location variable within the loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0830

Produtos afetados

Internet Explorer

Referências · 5

• http://securityfocus.com/archive/1/425283/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0830 · Nota de Segurança
• http://securityfocus.com/bid/16687 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24788 · Nota
• http://securityfocus.com/archive/1/425378/100/0/threaded · Nota