CVE-2003-1505

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Affected products

• Internet Explorer (Microsoft)

References

• http://securityreason.com/securityalert/3295
• http://www.securityfocus.com/archive/1/342010
• http://www.securityfocus.com/bid/8874
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13809