CVE-2006-7065
MEDIUM 5.0EPSS 20.9%
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 20.87% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2007-02-27
- Updated
- 2024-09-16