VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 22, 2007· Updated Jun 16, 2026

CVE-2006-7206

CVE-2006-7206

Description

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString function, a different issue than CVE-2006-3510 and CVE-2006-3899.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Microsoft/Internet Explorer2 versions
    cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
    • (no CPE)range: = 6.0 on Windows XP SP2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.