CVE-2002-1185

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of…

published September 1, 2004

CVSS

—

EPSS

21%

Percentile

97.6

In the wild

Unconfirmed

What it is

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.21342 · 97.6th percentile
Published: 2004-09-01T04:00Z

EPSS history

Timeline

01 SEP 04:00Z
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of…
cvelistv5