CVE

Id
9270  
CVE No.
CVE-2004-0842  
Status
Candidate  
Description
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."  
Phase
Assigned (20040908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61403 9270 CVE-2004-0842 FULLDISC:20040723 Crash IE with 11 bytes ;)  View
61404 9270 CVE-2004-0842 URL:http://marc.info/?l=full-disclosure&m=109060455614702&w=2  View
61405 9270 CVE-2004-0842 FULLDISC:20040728 Re: Crash IE with 11 bytes ;)  View
61406 9270 CVE-2004-0842 URL:http://marc.info/?l=full-disclosure&m=109102919426844&w=2  View
61407 9270 CVE-2004-0842 BUGTRAQ:20040728 Re: Crash IE with 11 bytes ;)  View
61408 9270 CVE-2004-0842 URL:http://marc.info/?l=bugtraq&m=109107496214572&w=2  View
61409 9270 CVE-2004-0842 MISC:http://www.ecqurity.com/adv/IEstyle.html  View
61410 9270 CVE-2004-0842 MISC:http://www.securiteam.com/exploits/5NP042KF5A.html  View
61411 9270 CVE-2004-0842 MS:MS04-038  View
61412 9270 CVE-2004-0842 URL:http://www.microsoft.com/technet/security/bulletin/ms04-038.asp  View
61413 9270 CVE-2004-0842 CERT:TA04-293A  View
61414 9270 CVE-2004-0842 URL:http://www.us-cert.gov/cas/techalerts/TA04-293A.html  View
61415 9270 CVE-2004-0842 CERT-VN:VU#291304  View
61416 9270 CVE-2004-0842 URL:http://www.kb.cert.org/vuls/id/291304  View
61417 9270 CVE-2004-0842 CIAC:P-006  View
61418 9270 CVE-2004-0842 URL:http://www.ciac.org/ciac/bulletins/p-006.shtml  View
61419 9270 CVE-2004-0842 BID:10816  View
61420 9270 CVE-2004-0842 URL:http://www.securityfocus.com/bid/10816  View
61421 9270 CVE-2004-0842 OVAL:oval:org.mitre.oval:def:2906  View
61422 9270 CVE-2004-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2906  View
61423 9270 CVE-2004-0842 OVAL:oval:org.mitre.oval:def:3372  View
61424 9270 CVE-2004-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3372  View
61425 9270 CVE-2004-0842 OVAL:oval:org.mitre.oval:def:4169  View
61426 9270 CVE-2004-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4169  View
61427 9270 CVE-2004-0842 OVAL:oval:org.mitre.oval:def:5592  View
61428 9270 CVE-2004-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5592  View
61429 9270 CVE-2004-0842 OVAL:oval:org.mitre.oval:def:6579  View
61430 9270 CVE-2004-0842 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6579  View
61431 9270 CVE-2004-0842 SECUNIA:12806  View
61432 9270 CVE-2004-0842 URL:http://secunia.com/advisories/12806  View
61433 9270 CVE-2004-0842 XF:ie-popupshow-perform-actions(16675)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63092 JVNDB-2004-000434 Microsoft Internet Explorer の ナビゲーションコマンドの処理における URL を偽装される脆弱性 Microsoft Internet Explorer において、プラグインからのナビゲーションコマンドの処理に不備が存在するため、Active X コントロールなどのプラグインからナビゲーションが実行された場合、実際に表示される Web ページとは異なる URL がアドレスバーに表示されてしまう脆弱性が存在します。 CVE-2004-0843 9270 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000434.html  View