First published: Fri Feb 23 2007(Updated: )
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 2000 | ||
Microsoft Windows 2003 Server | =sp2 | |
Microsoft Windows 98 | =gold | |
Microsoft Windows Me | ||
Microsoft Windows NT | ||
Microsoft Windows Vista | ||
Microsoft Windows XP | =gold | |
Microsoft Internet Explorer | =6.0-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-7030 is classified as a denial of service vulnerability that can cause Microsoft Internet Explorer to crash.
Users of Microsoft Internet Explorer 6 SP2 and earlier can experience crashes when encountering specific malformed HTML.
To mitigate CVE-2006-7030, users should upgrade to a newer version of Internet Explorer that is not affected by this vulnerability.
CVE-2006-7030 primarily affects users of Microsoft Internet Explorer 6.0 SP2 on Windows operating systems.
Yes, CVE-2006-7030 can be exploited by remote attackers via specially crafted HTML.