PT-2004-3326 · Microsoft · Internet Explorer

Publicado

2004-12-31

·

Atualizado

2017-07-11

·

CVE-2004-2434

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6.0 SP1
Description: The issue allows remote attackers to cause a denial of service, resulting in a browser crash. This occurs when a user attempts to save a link containing "::{" using the "Save As" function, triggering a null dereference as the browser prepares an error message with an attacker-controlled format string.
Recommendations: For Microsoft Internet Explorer version 6.0 SP1, consider avoiding the use of the "Save As" function on links containing suspicious characters until a fix is available. As a temporary workaround, restrict the saving of links with unusual formats to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-2434

Produtos afetados

Internet Explorer