NVD

Id
71265  
Name
CVE-2004-0842  
Description
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-23  
Modified Date
2017-07-10  
Seq
2004-0842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368253 71265 CVE-2004-0842 20040728 Re: Crash IE with 11 bytes ;)  View
368254 71265 CVE-2004-0842 20040723 Crash IE with 11 bytes ;)  View
368255 71265 CVE-2004-0842 20040728 Re: Crash IE with 11 bytes ;)  View
368256 71265 CVE-2004-0842 oval:org.mitre.oval:def:2906  View
368257 71265 CVE-2004-0842 oval:org.mitre.oval:def:3372  View
368258 71265 CVE-2004-0842 oval:org.mitre.oval:def:4169  View
368259 71265 CVE-2004-0842 oval:org.mitre.oval:def:5592  View
368260 71265 CVE-2004-0842 oval:org.mitre.oval:def:6579  View
368261 71265 CVE-2004-0842 P-006  View
368262 71265 CVE-2004-0842 http://www.ecqurity.com/adv/IEstyle.html  View
368263 71265 CVE-2004-0842 VU#291304  View
368264 71265 CVE-2004-0842 MS04-038  View
368265 71265 CVE-2004-0842 http://www.securiteam.com/exploits/5NP042KF5A.html  View
368266 71265 CVE-2004-0842 10816  View
368267 71265 CVE-2004-0842 TA04-293A  View
368268 71265 CVE-2004-0842 ie-popupshow-perform-actions(16675)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62921 JVNDB-2004-000263 Microsoft Internet Explorer の CSS の処理におけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer において、CSS (Cascading StyleSheet) の取り扱いの不備のため、コメントを閉じる "*/" が存在していない STYLE タグを解釈した場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0842 9269 CVE-2004-0842 71265 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000263.html 2004-07-02 2007-04-01 View