First published: Sat May 28 2005(Updated: )
Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this behavior, then perhaps this issue should not be included in CVE.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Internet Explorer | =6.0-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1791 is classified with moderate severity because it can cause a crash in Microsoft Internet Explorer.
CVE-2005-1791 affects users by causing Internet Explorer 6 SP2 to crash when adding certain URIs to the restricted zone.
CVE-2005-1791 specifically affects Microsoft Internet Explorer 6.0 SP2.
To mitigate the risks of CVE-2005-1791, avoid adding numeric-based URIs to the restricted zone in Internet Explorer.
There is no specific patch for CVE-2005-1791 as it is an older vulnerability; consider upgrading to a newer version of Internet Explorer.