What’s Vulnerable › Vulnerabilities

CVE-2007-0811

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 18.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-02-07 · updated 2026-06-16

Description

Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.

Affected products

• Microsoft Ie: 6, 6.0-sp2

References

• http://osvdb.org/37636
• http://www.powerhacker.net/exploit/IE_NULL_CRASH.html
• http://www.securityfocus.com/bid/22408
• https://www.exploit-db.com/exploits/3272
• http://osvdb.org/37636
• http://www.powerhacker.net/exploit/IE_NULL_CRASH.html
• http://www.securityfocus.com/bid/22408
• https://www.exploit-db.com/exploits/3272

Get alerted when CVE-2007-0811 or the next vulnerability affects your stack