CVE-2003-1048
published 2004-07-27CVE-2003-1048: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash)…
PriorityP428high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
26.63%
97.8th percentile
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | outlook | — | — |
| microsoft | windows_nt | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.htmlhttp://www.ciac.org/ciac/bulletins/o-191.shtmlhttp://www.kb.cert.org/vuls/id/685364http://www.securityfocus.com/bid/8530http://www.us-cert.gov/cas/techalerts/TA04-212A.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025https://exchange.xforce.ibmcloud.com/vulnerabilities/16804https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.htmlhttp://www.ciac.org/ciac/bulletins/o-191.shtmlhttp://www.kb.cert.org/vuls/id/685364http://www.securityfocus.com/bid/8530http://www.us-cert.gov/cas/techalerts/TA04-212A.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025https://exchange.xforce.ibmcloud.com/vulnerabilities/16804https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517
2004-07-27
Published