medium5.0Public exploit code
CVE-2002-1714
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5/6 - Self-Referential Object Denial of Service2002-04-20 · dos · windows · Verified
Impact
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.0, 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/268776
- http://www.securityfocus.com/bid/4564
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8904
- http://online.securityfocus.com/archive/1/268776
- http://www.securityfocus.com/bid/4564
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8904