PT-2003-2060 · Microsoft · Outlook Express+1

Greg Jones · Publicado 2003-12-31 · Atualizado 2021-07-23 · CVE-2003-1105

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.01 SP3 through 6.0 SP1

Description The issue concerns a problem with rendering certain input tags in HTML, which can cause a denial of service. This results in the browser or Outlook Express crashing when it encounters specific HTML input.

Recommendations For versions 5.01 SP3 through 6.0 SP1, consider avoiding the use of HTML with certain input tags until a fix is available. As a temporary workaround, restrict the rendering of such tags to prevent the browser or Outlook Express from crashing.

Correção

Identificadores relacionados

CVE-2003-1105

Produtos afetados

Internet Explorer

Outlook Express

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1105 · Nota de Segurança
• http://kb.cert.org/vuls/id/813208 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13029 · Nota