CVE-2003-1048: Buffer Overflow
Published Jul 21, 2004
·Updated
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
Affected Software
30 affected components
Microsoft Outlook=2000-sr1
Microsoft Outlook=2000
Microsoft ie=6.0-sp1
Microsoft Outlook=2000-sp3
Microsoft Outlook=2002-sp2
Microsoft Outlook=2002-sp1
Microsoft Outlook=2000-sp2
Microsoft Outlook=2002
Microsoft Internet Explorer=5.5-sp2
Microsoft Internet Explorer=5.0.1-sp1
Microsoft Internet Explorer=5.5
Microsoft Internet Explorer=5.5-sp1
Microsoft Internet Explorer=6.0
Microsoft Internet Explorer=5.0.1-sp2
Microsoft Internet Explorer=5.0.1-sp3
Microsoft Internet Explorer=5.01-sp2
Microsoft Internet Explorer=5.01-sp3
Microsoft Internet Explorer=5.01-sp4
Microsoft Internet Explorer=6.0
Microsoft Internet Explorer=6.0-sp1
Microsoft Outlook=2000-sp4
Microsoft Windows 98
Microsoft Windows 98SE
Microsoft Windows Me
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows Server 2003
Microsoft Windows XP
Microsoft Windows XP=sp1
Remediation
Event History
Jul 21, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1048?
CVE-2003-1048 is classified as a moderate severity vulnerability that can lead to denial of service.
2
How do I fix CVE-2003-1048?
To fix CVE-2003-1048, upgrade to the latest version of Internet Explorer or apply available security patches.
3
Which versions of Internet Explorer are affected by CVE-2003-1048?
CVE-2003-1048 affects Internet Explorer versions 5.01, 5.5, and 6.0, particularly various service packs.
4
What type of attack can exploit CVE-2003-1048?
CVE-2003-1048 can be exploited via a remote attack using a specially crafted GIF image to crash the affected application.
5
Is getting rid of CVE-2003-1048 important for security?
Yes, addressing CVE-2003-1048 is crucial as it can allow attackers to disrupt service by crashing Internet Explorer.