CVE-2005-2308
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2005-07-19
- Last modified
- 2024-09-17
Affected products
References
- http://lcamtuf.coredump.cx/crash
- http://www.securityfocus.com/archive/1/405298
- http://www.securityfocus.com/bid/14284
- http://www.securityfocus.com/bid/14285
- http://www.securityfocus.com/bid/14286