CVE-2006-7065

Name: CVE-2006-7065
Creator: NVD / NIST
Published: 2007-03-02T21:18:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 19.93%

Last modified Jun 16, 2026

CVE-2006-7065 is a vulnerability of currently unknown severity. Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.. EPSS estimates a 19.93% chance of exploitation in the next 30 days.

Description

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

Metrics

EPSS Probability

19.93%

97.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Microsoft	Ie	6	—
Microsoft	Ie	6.0	—
Microsoft	Ie	7	—
Microsoft	Ie	7.0	—
Microsoft	Internet Explorer	6	Sp1
Microsoft	Internet Explorer	6.0	—
Microsoft	Internet Explorer	6.0.2600	—
Microsoft	Internet Explorer	6.0.2800	—
Microsoft	Internet Explorer	6.0.2800.1106	—
Microsoft	Internet Explorer	6.0.2900	—
Microsoft	Internet Explorer	6.0.2900.2180	—
Microsoft	Internet Explorer	7.0	Beta
Canon	Network Camera Server Vb101	All versions	—

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.htmlExploit
http://www.securityfocus.com/bid/19364Exploit, Vendor Advisory
http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.htmlExploit
http://www.securityfocus.com/bid/19364Exploit, Vendor Advisory
http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511

Timeline

Published: Mar 2, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-7065?

How severe is CVE-2006-7065?

Severity scoring for CVE-2006-7065 is pending analysis. The EPSS model estimates a 19.93% probability of exploitation in the next 30 days.

How do I fix CVE-2006-7065?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-7065?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST