CVE-2004-0842 Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading St...
HighCVSS 7.5
EPSS 56.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya ip600 media servers | All versions | No fix listed |
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp2 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp3 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp4 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 5.5-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
| avaya definity one media server | All versions | No fix listed |
| avaya s3400 | All versions | No fix listed |
| avaya s8100 | All versions | No fix listed |
| avaya modular messaging message storage server | = 1.1 | No fix listed |
| avaya modular messaging message storage server | = 2.0 | No fix listed |
References
- 20040728 Re: Crash IE with 11 bytes ;) mailing-list
- 20040723 Crash IE with 11 bytes ;) mailing-list
- 20040728 Re: Crash IE with 11 bytes ;) mailing-list
- 12806 third-party-advisory
- P-006 government-resource third-party-advisory
- www.ecqurity.com exploit vendor-advisory
- VU#291304 third-party-advisory us-government-resource
- www.securiteam.com
- 10816 exploit patch vdb-entry vendor-advisory
- TA04-293A third-party-advisory us-government-resource
- MS04-038 vendor-advisory
- ie-popupshow-perform-actions(16675) vdb-entry
- oval:org.mitre.oval:def:2906 signature vdb-entry
- oval:org.mitre.oval:def:3372 signature vdb-entry
- oval:org.mitre.oval:def:4169 signature vdb-entry
- oval:org.mitre.oval:def:5592 signature vdb-entry
- oval:org.mitre.oval:def:6579 signature vdb-entry