CVE-2006-7029

Microsoft Internet Explorer < 6.0 - Denial of Service via Frameset resizeTo

Title source: llm

Description

Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/434903/30/4800/threaded

Exploit mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435990

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435168/30/4680/threaded

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/434742/30/4830/threaded

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435004/30/4740/threaded

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435147/30/4680/threaded

Scores

EPSS 0.1250

EPSS Percentile 95.8%

Details

Status published

Products (1)

microsoft/internet_explorer < 6.0

Published Feb 23, 2007

Tracked Since Feb 18, 2026