Strix
26.1K

CVE-2005-4717

UnknownEPSS 19.48%

Last modified

CVE-2005-4717 is a vulnerability of currently unknown severity. Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.. EPSS estimates a 19.48% chance of exploitation in the next 30 days.

Description

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.

Metrics

EPSS Probability
19.48%

97.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
MicrosoftIe6.0Sp1
MicrosoftInternet Explorer6.0—
MicrosoftWindows 2000All versionsSp4
MicrosoftWindows 2003 Serversp1—
MicrosoftWindows Nt4.0Sp6a
MicrosoftWindows XpAll versionsSp1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-4717?
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
How severe is CVE-2005-4717?
Severity scoring for CVE-2005-4717 is pending analysis. The EPSS model estimates a 19.48% probability of exploitation in the next 30 days.
How do I fix CVE-2005-4717?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2005

View all 2005CVEs →

Are you affected by CVE-2005-4717?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST