Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 7.0.5730-unknown (including) | 7.0.5730-unknown (including) |
| Internet_explorer | Microsoft | 8.0.6001-beta (including) | 8.0.6001-beta (including) |
References
- http://securityreason.com/securityalert/4273
- http://www.securityfocus.com/archive/1/496483/100/0/threaded
- http://www.securityfocus.com/bid/31215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45225
- http://securityreason.com/securityalert/4273
- http://www.securityfocus.com/archive/1/496483/100/0/threaded
- http://www.securityfocus.com/bid/31215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45225