CVE-2005-4717: Medium severity Microsoft ie vulnerability
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4717?
CVE-2005-4717 has a severity rating that indicates it can cause a denial of service through a client crash.
How do I fix CVE-2005-4717?
To fix CVE-2005-4717, users should update to the latest version of Internet Explorer available from Microsoft.
Which versions of Internet Explorer are affected by CVE-2005-4717?
CVE-2005-4717 affects Microsoft Internet Explorer 6.0 on multiple platforms, including Windows NT, Windows 2000, Windows XP, and Windows Server 2003.
Can CVE-2005-4717 be exploited remotely?
Yes, CVE-2005-4717 can be exploited remotely by delivering a malformed HTML file to the target.
What are the symptoms of exploitation of CVE-2005-4717?
The primary symptom of CVE-2005-4717 exploitation is a crash of the Internet Explorer client, leading to a denial of service.