CVE-2006-7029: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 12.9% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one frame that calls resizeTo with certain arguments. NOTE: this issue might be related to CVE-2006-3637.

Affected products

• Microsoft Internet Explorer: up to and including 6.0

Published 2007-02-23. Last modified 2026-06-16.