CVE-2007-0811 Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML docume...
MediumCVSS 4.3
EPSS 18.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6 | No fix listed |
| Microsoft ie | = 6.0-sp2 | No fix listed |
References
- 37636 vdb-entry
- www.powerhacker.net exploit url-repurposed
- 22408 vdb-entry
- 3272 exploit