PT-2007-1345 · Microsoft · Internet Explorer

Published 2007-02-27 · Updated 2021-12-13 · CVE-2006-7066

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 7.0.6000.16473

Description The issue allows remote attackers to cause a denial of service by creating an object inside an iframe, deleting the frame, and then accessing a property of the object within the deleted frame, triggering a NULL pointer dereference.

Recommendations For Microsoft Internet Explorer version 6, update to a version later than 7.0.6000.16473 to resolve the issue. For Microsoft Internet Explorer versions prior to 7.0.6000.16473, update to a version later than 7.0.6000.16473 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-7066

Affected Products

Internet Explorer

References · 9

• 🔥 http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html · Exploit
• 🔥 https://exploit-db.com/exploits/28301 · Exploit
• 🔥 http://securityfocus.com/bid/19228 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7066 · Security Note
• http://websecurity.com.ua/3130 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28068 · Note
• http://osvdb.org/27533 · Note
• http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html · Note
• http://blogs.securiteam.com/index.php/archives/554 · Note