PT-2006-5642 · Microsoft · Internet Explorer

Publicado 2006-09-19 · Atualizado 2008-09-05 · CVE-2006-4888

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application hang. This occurs when a CSS-formatted HTML INPUT element is placed within a DIV element that has a larger size than the INPUT.

Recommendations For Microsoft Internet Explorer versions 6 and earlier, consider avoiding the use of CSS-formatted HTML INPUT elements within larger DIV elements until a fix is available. As a temporary workaround, restrict the size of DIV elements to match or be smaller than the INPUT elements they contain.

Correção

Identificadores relacionados

CVE-2006-4888

Produtos afetados

Internet Explorer

Referências · 4

• http://osvdb.org/28614 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4888 · Nota de Segurança
• http://jonas.elunic.de/blog/index.php/2006/07/14/ie-freeze-bug · Nota
• http://archives.neohapsis.com/archives/bugtraq/2006-07/0199.html · Nota