CVE-2006-7066: Null Pointer Dereference
First published: Tue Feb 27 2007(Updated: )
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NULL pointer dereference. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows XP | =sp2 | |
| Internet Explorer | =6.0 | |
| Internet Explorer | =6.0-sp1 | |
| Internet Explorer | =6.0-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://blogs.securiteam.com/index.php/archives/554
- http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html
- http://www.securityfocus.com/bid/19228
- http://www.osvdb.org/27533
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
- http://websecurity.com.ua/3130/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28068
Frequently Asked Questions
What is the severity of CVE-2006-7066?
CVE-2006-7066 is classified as a denial of service vulnerability that can crash Microsoft Internet Explorer 6 on Windows XP SP2.
How does CVE-2006-7066 exploit work?
CVE-2006-7066 exploits the handling of objects inside iframes by deleting the frame and then accessing properties of the object within the deleted frame.
What versions of Internet Explorer are affected by CVE-2006-7066?
CVE-2006-7066 affects Internet Explorer versions 6.0, 6.0 with SP1, and 6.0 with SP2.
Is Microsoft Windows XP SP2 vulnerable to CVE-2006-7066?
Yes, Microsoft Windows XP SP2 is vulnerable to CVE-2006-7066 when using Internet Explorer.
How can I protect my system from CVE-2006-7066?
To protect against CVE-2006-7066, users should consider upgrading their web browser and operating system to versions that are no longer vulnerable.
- collector/nvd-historical
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- canonical/internet explorer
- version/internet explorer/6.0
- version/internet explorer/6.0-sp1
- version/internet explorer/6.0-sp2