high7.5Public exploit code
CVE-2005-2308
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service2005-07-15 · dos · windows · Verified
Impact
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
References
- NVD record
- CVE.org record
- http://lcamtuf.coredump.cx/crash
- http://www.securityfocus.com/archive/1/405298
- http://www.securityfocus.com/bid/14284
- http://www.securityfocus.com/bid/14285
- http://www.securityfocus.com/bid/14286
- http://lcamtuf.coredump.cx/crash
- http://www.securityfocus.com/archive/1/405298
- http://www.securityfocus.com/bid/14284
- http://www.securityfocus.com/bid/14285
- http://www.securityfocus.com/bid/14286