What’s Vulnerable › Vulnerabilities

CVE-2006-0544

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 21.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-02-04 · updated 2026-06-16

Description

urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.

Affected products

• Microsoft Ie: 7.0-beta_2

References

• http://www.security-protocols.com/advisory/sp-x23-advisory.txt
• http://www.securityfocus.com/bid/16463
• http://www.security-protocols.com/advisory/sp-x23-advisory.txt
• http://www.securityfocus.com/bid/16463

Get alerted when CVE-2006-0544 or the next vulnerability affects your stack