CVE-2006-7065: Canon Network Camera Server VB101

Medium severity, CVSS 5.0. EPSS: 20.9% chance of exploitation in the next 30 days.

Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

Affected products

• Canon Network Camera Server VB101: any version
• Microsoft Ie: version 6 only; version 6.0 only; version 7 only; version 7.0 only
• Microsoft Internet Explorer: version 6 only; version 6.0 only; version 6.0.2600 only; version 6.0.2800 only; version 6.0.2800.1106 only; version 6.0.2900 only; …

Published 2007-03-02. Last modified 2026-06-16.