MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Outlook | Microsoft | 2000 (including) | 2000 (including) |
| Outlook_express | Microsoft | 5.5 (including) | 5.5 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=97958685100219\u0026w=2
- http://www.securityfocus.com/bid/2202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5938
- http://marc.info/?l=bugtraq\u0026m=97958685100219\u0026w=2
- http://www.securityfocus.com/bid/2202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5938