CVE

Id
5569  
CVE No.
CVE-2002-1185  
Status
Entry  
Description
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30397 5569 CVE-2002-1185 VULNWATCH:20021211 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability  View
30398 5569 CVE-2002-1185 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html  View
30399 5569 CVE-2002-1185 BUGTRAQ:20021212 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability  View
30400 5569 CVE-2002-1185 URL:http://marc.info/?l=bugtraq&m=103970996205091&w=2  View
30401 5569 CVE-2002-1185 EEYE:AD20021211  View
30402 5569 CVE-2002-1185 URL:http://www.eeye.com/html/Research/Advisories/AD20021211.html  View
30403 5569 CVE-2002-1185 MS:MS02-066  View
30404 5569 CVE-2002-1185 URL:http://www.microsoft.com/technet/security/bulletin/ms02-066.asp  View
30405 5569 CVE-2002-1185 XF:ie-png-bo(10662)  View
30406 5569 CVE-2002-1185 URL:http://www.iss.net/security_center/static/10662.php  View
30407 5569 CVE-2002-1185 BID:6216  View
30408 5569 CVE-2002-1185 URL:http://www.securityfocus.com/bid/6216  View
30409 5569 CVE-2002-1185 OVAL:oval:org.mitre.oval:def:393  View
30410 5569 CVE-2002-1185 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:393  View
30411 5569 CVE-2002-1185 OVAL:oval:org.mitre.oval:def:542  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63955 JVNDB-2002-000282 Microsoft Internet Explorerの PNG形式ファイルにおけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer に含まれる pngfilt.dll の 6.0.2600.0 以前のバージョンには、IDAT ヘッダの処理に不備が存在し、この dll に含まれる inflate_fast() 関数には、PNG 形式のファイルの "deflate" 圧縮されたデータストリームに無効なデータが含まれていた場合に、ヒープ領域でバッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-1185 5569 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000282.html  View