Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2005-12-30 21:00
Updated : 2021-07-23 05:55
NVD link : CVE-2005-4717
Mitre link : CVE-2005-4717
JSON object : View
CWE
Products Affected
microsoft
- windows_2003_server
- windows_nt
- windows_xp
- internet_explorer
- ie
- windows_2000