PT-2005-2758 · Microsoft · Internet Explorer
Benjamin Tobias Franz
·
Publicado
2005-06-01
·
Atualizado
2021-07-23
·
CVE-2005-1790
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions prior to 6.0.2900.2180
Description
The issue allows remote attackers to cause a denial of service and execute arbitrary code via a Javascript BODY onload event that calls the
window function.Recommendations
For versions prior to 6.0.2900.2180, update to a version that is not affected by this issue to prevent exploitation. As a temporary workaround, consider disabling Javascript or restricting the use of the
window function in the BODY onload event until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Internet Explorer