PT-2005-4123 · Microsoft · Internet Explorer

Marc Ruef

+1

·

Publicado

2005-10-26

·

Atualizado

2021-07-23

·

CVE-2005-3312

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 6.0
Description The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted image and audio files, such as .GIF, JPG, and WAV. These files are rendered as HTML when the user clicks on the link, despite the web server response and file extension indicating that they should be treated as a different file type.
Recommendations For Microsoft Internet Explorer version 6.0, consider disabling the rendering of HTML in files with non-HTML extensions as a temporary workaround until a patch is available. Restrict access to potentially corrupted files to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-3312

Produtos afetados

Internet Explorer