CVE-2004-0842
- State
- Published
- Severity
- Not scored
- Published
- Sep 14, 2004
- Updated
- Aug 8, 2024
- Reserved
- Sep 8, 2004
Description
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20040728 Re: Crash IE with 11 bytes ;)mailing-list
- oval:org.mitre.oval:def:4169vdb-entrysignature
- MS04-038vendor-advisory
- http://www.securiteam.com/exploits/5NP042KF5A.html
- VU#291304third-party-advisory
- oval:org.mitre.oval:def:2906vdb-entrysignature
- 20040723 Crash IE with 11 bytes ;)mailing-list
- http://www.ecqurity.com/adv/IEstyle.html
- oval:org.mitre.oval:def:5592vdb-entrysignature
- ie-popupshow-perform-actions(16675)vdb-entry
- TA04-293Athird-party-advisory
- 20040728 Re: Crash IE with 11 bytes ;)mailing-list
- 12806third-party-advisory
- P-006third-party-advisorygovernment-resource
- 10816vdb-entry
- oval:org.mitre.oval:def:6579vdb-entrysignature
- oval:org.mitre.oval:def:3372vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.