CVE-2006-0830

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the "location" variable within the loop.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-02-21

Last modified

2024-08-07

Affected products

• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/archive/1/425283/100/0/threaded
• http://www.securityfocus.com/archive/1/425378/100/0/threaded
• http://www.securityfocus.com/bid/16687
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24788