CVE-2006-6310

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://downloads.securityfocus.com/vulnerabilities/exploits/21447.html	Exploit
http://www.osvdb.org/31325
http://www.securityfocus.com/bid/21447	Exploit

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:internet_explorer::sp1::::::*
	cpe:2.3:a:microsoft:internet_explorer:6.0:::::::*

History

No history.

Information

Published : 2006-12-06 20:28

Updated : 2024-02-28 11:01

NVD link : CVE-2006-6310

Mitre link : CVE-2006-6310

CVE.ORG link : CVE-2006-6310

JSON object : View

Products Affected

microsoft

internet_explorer

CWE

NVD-CWE-Other

{"id": "CVE-2006-6310", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-06T20:28:00.000", "references": [{"url": "http://downloads.securityfocus.com/vulnerabilities/exploits/21447.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/31325", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21447", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value (\"?\") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information."}, {"lang": "es", "value": "Microsoft Internet Explorer 6.0 SP1 y anteriores permiten a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) mediante un valor del atributo src inv\u00e1lido (\"?\") en una etiqueta frame de HTML que se encuentra dentro de una etiqueta frameset con un atriburo rows grande. NOTA: la procedencia de esta informaci\u00f3n es desconocida; los detalles se han obtenido de informaci\u00f3n de terceros."}], "lastModified": "2021-07-23T12:55:03.667", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18C773CC-4611-4CDC-B8B6-C0AC7265F0C1", "versionEndIncluding": "6.0"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}