CVE-2004-2307

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\) in an HTML tag such as IFRAME or A.

Ссылки

http://www.securityfocus.com/archive/1/358043
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/9924
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15544
http://www.securityfocus.com/archive/1/358043
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/9924
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15544

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*

EPSS

Процентиль: 93%

0.09949

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3g8q-59m9-fg5h

github

почти 4 года назад

Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or A.