What’s Vulnerable › Vulnerabilities

CVE-2006-7065

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 20.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-02-27 · updated 2026-06-16

Description

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

Affected products

• Canon Network Camera Server Vb101: all versions
• Microsoft Ie: 6, 6-sp1, 6-windows_2000_sp4, 6-windows_server_2003_sp1, 6-windows_server_2003_sp1_itanium, 6-windows_server_2003_sp1_itanium_systems (+12)
• Microsoft Internet Explorer 11: 6-sp1, 6.0, 6.0.2600, 6.0.2800, 6.0.2800.1106, 6.0.2900 (+5)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.html
• http://www.securityfocus.com/bid/19364
• http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511
• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.html
• http://www.securityfocus.com/bid/19364
• http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511

Get alerted when CVE-2006-7065 or the next vulnerability affects your stack