CVE-2005-2308: High severity Microsoft ie vulnerability

Published Jul 19, 2005

Updated

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) movfencepost.jpg, (2) cmpfencepost.jpg, (3) oomdos.jpg, or (4) random.jpg.

Affected Software

1 affected component

Microsoft ie=6.0-sp2

Event History

Jul 19, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2308?

CVE-2005-2308 has a medium severity rating due to its potential to cause denial of service and possible arbitrary code execution.

How do I fix CVE-2005-2308?

To fix CVE-2005-2308, it is recommended to update Microsoft Internet Explorer to the latest version available.

What impact does CVE-2005-2308 have on systems?

CVE-2005-2308 can result in high CPU consumption, application crashes, or execution of potentially harmful code.

Which versions of Internet Explorer are affected by CVE-2005-2308?

CVE-2005-2308 specifically affects Microsoft Internet Explorer 6.0 with Service Pack 2.

Can CVE-2005-2308 be exploited remotely?

Yes, CVE-2005-2308 can be exploited remotely through specially crafted JPEG images.