Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 00:05
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0673.html - Exploit | |
References | () http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0127.html - | |
References | () http://www.securityfocus.com/bid/15268 - Exploit |
Information
Published : 2005-12-31 05:00
Updated : 2024-11-21 00:05
NVD link : CVE-2005-4717
Mitre link : CVE-2005-4717
CVE.ORG link : CVE-2005-4717
JSON object : View
Products Affected
microsoft
- windows_xp
- windows_2000
- ie
- windows_nt
- internet_explorer
- windows_2003_server
CWE