PT-2003-2060 · Microsoft · Outlook Express+1

Greg Jones · Published 2003-12-31 · Updated 2021-07-23 · CVE-2003-1105

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.01 SP3 through 6.0 SP1

Description The issue concerns a problem with rendering certain input tags in HTML, which can cause a denial of service. This results in the browser or Outlook Express crashing when it encounters specific HTML input.

Recommendations For versions 5.01 SP3 through 6.0 SP1, consider avoiding the use of HTML with certain input tags until a fix is available. As a temporary workaround, restrict the rendering of such tags to prevent the browser or Outlook Express from crashing.

Fix

Related Identifiers

CVE-2003-1105

Affected Products

Internet Explorer

Outlook Express

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1105 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 · Vendor Advisory
• http://kb.cert.org/vuls/id/813208 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13029 · Note