CVE-2006-7066

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 22.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-27 · updated 2026-06-16

Description

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NULL pointer dereference. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.

Affected products

Microsoft Internet Explorer 11: 6.0, 6.0-sp1, 6.0-sp2

References

http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
http://blogs.securiteam.com/index.php/archives/554
http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
http://websecurity.com.ua/3130/
http://www.osvdb.org/27533
http://www.securityfocus.com/bid/19228
https://exchange.xforce.ibmcloud.com/vulnerabilities/28068
http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
http://blogs.securiteam.com/index.php/archives/554
http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
http://websecurity.com.ua/3130/
http://www.osvdb.org/27533

Get alerted when CVE-2006-7066 or the next vulnerability affects your stack