CVE

Id
10860  
CVE No.
CVE-2004-2434  
Status
Candidate  
Description
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an attacker-controlled format string.  
Phase
Assigned (20050818)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
75820 10860 CVE-2004-2434 FULLDISC:20040614 Internet Explorer Remote Null Pointer Crash(mshtml.dll)  View
75821 10860 CVE-2004-2434 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0397.html  View
75822 10860 CVE-2004-2434 FULLDISC:20040615 RE: Internet Explorer Remote Null Pointer Crash(mshtml.dll)  View
75823 10860 CVE-2004-2434 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0428.html  View
75824 10860 CVE-2004-2434 FULLDISC:20040728 Re: Internet Explorer Remote Null Pointer Crash(mshtml.dll)  View
75825 10860 CVE-2004-2434 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1126.html  View
75826 10860 CVE-2004-2434 MISC:http://www.securiteam.com/windowsntfocus/5IP020KDPU.html  View
75827 10860 CVE-2004-2434 OSVDB:8335  View
75828 10860 CVE-2004-2434 URL:http://www.osvdb.org/8335  View
75829 10860 CVE-2004-2434 SECTRACK:1010491  View
75830 10860 CVE-2004-2434 URL:http://securitytracker.com/id?1010491  View
75831 10860 CVE-2004-2434 XF:ie-null-pointer-dos(16420)  View

Related JVN