CVE-2006-7029
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of...
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
Exploit likelihood
What each source reports
NVD Score used
5.0
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
- Record
CVE-2006-7029- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
- Record
CVE-2006-7029- Updated
- 2026-11-02
EUVDEUVD-2006-7011 No score
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
- Record
EUVD-2006-7011- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-543j-8vcx-936x No score
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of...
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.
- Record
GHSA-543j-8vcx-936x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-7029 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published February 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.9%, the 96th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/434903/30/4800/threaded
securityfocus.com/archive/1/435990
securityfocus.com/archive/1/435168/30/4680/threaded
securityfocus.com/archive/1/434742/30/4830/threaded
securityfocus.com/archive/1/435004/30/4740/threaded
securityfocus.com/archive/1/435147/30/4680/threaded
nvd.nist.gov/vuln/detail/CVE-2006-7029
github.com/advisories/GHSA-543j-8vcx-936x