CVE-2002-1705 Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight.
MediumCVSS 5.0
EPSS 17.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20020615 IE 5.-6 CSS parsing error mailing-list
- 20020615 RE: IE 5.-6 CSS parsing error mailing-list
- 5027 exploit vdb-entry
- ie-css-bold-dos(9367) vdb-entry