Vulnerability in Microsoft Ie
CVE-2005-4717
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
EPSS: 0.162 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 6.0
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions sp1
- Microsoft Windows_nt — versions 4.0
- Microsoft Windows_xp
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)