Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html - | |
References | () http://marc.info/?l=bugtraq&m=103970996205091&w=2 - | |
References | () http://www.eeye.com/html/Research/Advisories/AD20021211.html - | |
References | () http://www.iss.net/security_center/static/10662.php - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/6216 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A393 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542 - |
Information
Published : 2002-12-11 05:00
Updated : 2024-11-20 23:40
NVD link : CVE-2002-1185
Mitre link : CVE-2002-1185
CVE.ORG link : CVE-2002-1185
JSON object : View
Products Affected
microsoft
- internet_explorer
- ie
CWE