← Volver a CVEs

CVE-2003-1048

HIGH

7.8

Descripcion

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado7/27/2004

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

microsoft:internet_explorermicrosoft:outlookmicrosoft:windows_98microsoft:windows_98semicrosoft:windows_memicrosoft:windows_ntmicrosoft:windows_server_2003microsoft:windows_xp

Debilidades (CWE)

CWE-415

Referencias

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html(cve@mitre.org)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html(cve@mitre.org)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html(cve@mitre.org)

http://www.ciac.org/ciac/bulletins/o-191.shtml(cve@mitre.org)

http://www.kb.cert.org/vuls/id/685364(cve@mitre.org)

http://www.securityfocus.com/bid/8530(cve@mitre.org)

http://www.us-cert.gov/cas/techalerts/TA04-212A.html(cve@mitre.org)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16804(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517(cve@mitre.org)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.ciac.org/ciac/bulletins/o-191.shtml(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/685364(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/8530(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA04-212A.html(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16804(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.