CVE-2007-0811 — Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById

Back Back to CVE browser

MEDIUM

Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById

Published Feb 7, 2007

4.3

MEDIUM

CVSS 2.0

EPSS 18.07%

Description

Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an HTML document containing a certain JavaScript for loop with an empty loop body, possibly involving getElementById.

Affected products

Remediation

No remediation recorded yet.

Metrics

18.07% 0.18072

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.18072

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	18.07% (0.18072)	97.11th	v5 (v2026.06.15)
Jun 15, 2026	17.25% (0.17248)	96.70th	v5 (v2026.06.15)
Mar 17, 2025	46.52% (0.46521)	97.37th	v4 (v2025.03.14)
Dec 17, 2024	91.29% (0.91286)	99.13th	v3 (v2023.03.01)
Jul 2, 2024	92.62% (0.92615)	99.02th	v3 (v2023.03.01)
Apr 4, 2024	92.39% (0.92394)	98.93th	v3 (v2023.03.01)
Jan 19, 2024	91.62% (0.91624)	98.69th	v3 (v2023.03.01)
Dec 12, 2023	92.07% (0.92067)	98.70th	v3 (v2023.03.01)
Nov 4, 2023	92.56% (0.92560)	98.71th	v3 (v2023.03.01)
Sep 27, 2023	94.23% (0.94226)	98.88th	v3 (v2023.03.01)
Apr 29, 2023	95.23% (0.95231)	98.93th	v3 (v2023.03.01)
Mar 22, 2023	95.09% (0.95091)	98.84th	v3 (v2023.03.01)
Mar 7, 2023	95.05% (0.95053)	98.82th	v3 (v2023.03.01)
Mar 6, 2023	25.60% (0.25598)	97.01th	v2 (v2022.01.01)
Feb 4, 2022	25.60% (0.25598)	95.57th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (4)

http://osvdb.org/37636
vdb-entryx_refsource_OSVDB
http://www.powerhacker.net/exploit/IE_NULL_CRASH.html
x_refsource_MISCExploitURL Repurposed
http://www.securityfocus.com/bid/22408
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/3272
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/37636		vdb-entryx_refsource_OSVDB
http://www.powerhacker.net/exploit/IE_NULL_CRASH.html		x_refsource_MISCExploitURL Repurposed
http://www.securityfocus.com/bid/22408		vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/3272		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 7, 2007

Updated Aug 7, 2024

Reserved Feb 7, 2007

Link CVE-2007-0811

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-0811

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-0811