CVE-2001-0322 MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is as...
MediumCVSS 5.0
EPSS 21.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 4.0 | No fix listed |
| Microsoft outlook | = 2000 | No fix listed |
| Microsoft outlook express | = 5.5 | No fix listed |
References
- 20010115 Stack Overflow in MSHTML.DLL mailing-list
- 2202 exploit vdb-entry vendor-advisory
- ie-mshtml-dos(5938) vdb-entry