Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_2000 | Microsoft | * | * |
| Windows_2003_server | Microsoft | sp2 (including) | sp2 (including) |
| Windows_98 | Microsoft | * | * |
| Windows_me | Microsoft | * | * |
| Windows_nt | Microsoft | * | * |
| Windows_vista | Microsoft | * | * |
| Windows_xp | Microsoft | * | * |
References
- http://securityreason.com/securityalert/2286
- http://www.securityfocus.com/archive/1/435095/30/4710/threaded
- http://www.securityfocus.com/archive/1/435129/30/4710/threaded
- http://www.securityfocus.com/bid/18112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26808
- http://securityreason.com/securityalert/2286
- http://www.securityfocus.com/archive/1/435095/30/4710/threaded
- http://www.securityfocus.com/archive/1/435129/30/4710/threaded
- http://www.securityfocus.com/bid/18112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26808