CVE-2007-0811

Microsoft Internet Explorer 6.0 - DoS

Title source: llm

Description

Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.

Exploits (1)

exploitdb WORKING POC VERIFIED

by AmesianX · htmldoswindows

https://www.exploit-db.com/exploits/3272

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://osvdb.org/37636

[Exploit, URL Repurposed] http://www.powerhacker.net/exploit/IE_NULL_CRASH.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/22408

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3272

Scores

EPSS 0.4692

EPSS Percentile 97.7%

Details

Status published

Products (2)

microsoft/ie 6

microsoft/ie 6.0 sp2

Published Feb 07, 2007

Tracked Since Feb 18, 2026