CVE-2002-1185: Buffer Overflow
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1185?
CVE-2002-1185 is considered a low-severity vulnerability that can cause a denial of service.
How do I fix CVE-2002-1185?
To fix CVE-2002-1185, users should upgrade to a patched version of Internet Explorer.
Which versions of Internet Explorer are affected by CVE-2002-1185?
CVE-2002-1185 affects Internet Explorer versions 5.0.1 through 6.0.
Can CVE-2002-1185 be exploited remotely?
Yes, CVE-2002-1185 can be exploited remotely by attackers through specially crafted PNG files.
What is the nature of the attack for CVE-2002-1185?
The attack for CVE-2002-1185 involves a heap-based buffer overflow triggered by malformed PNG image files.