PT-2006-1877 · Microsoft · Internet Explorer

Published 2006-02-21 · Updated 2021-07-23 · CVE-2006-0830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified)

Description The issue concerns the scripting engine in Internet Explorer, which can be exploited by remote attackers through a web page containing a recurrent call to an infinite loop in Javascript or VBscript. This can lead to a denial of service due to resource consumption and potentially allow the execution of arbitrary code. The exploitation is demonstrated by resetting the location variable within the loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0830

Affected Products

Internet Explorer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-0830 · Security Note
• http://securityfocus.com/archive/1/425283/100/0/threaded · Note
• http://securityfocus.com/bid/16687 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24788 · Note
• http://securityfocus.com/archive/1/425378/100/0/threaded · Note