Lucene search

[email protected]CVE-2003-1048

HistoryJul 27, 2004 - 4:00 a.m.

CVE-2003-1048

2004-07-2704:00:00

CWE-415

[email protected]

web.nvd.nist.gov

cve-2003-1048

mshtml.dll

internet explorer

remote attackers

denial of service

application crash

gif image

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.63 Medium

EPSS

Percentile

97.8%

JSON

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.

CPENameOperatorVersion
microsoft:outlookmicrosoft outlookeq2000
microsoft:internet_explorermicrosoft internet explorereq5.01
microsoft:windows_xpmicrosoft windows xpeq-
microsoft:windows_server_2003microsoft windows server 2003eq-
microsoft:windows_98microsoft windows 98eq-
microsoft:internet_explorermicrosoft internet explorereq5.5
microsoft:windows_memicrosoft windows meeq-
microsoft:windows_98semicrosoft windows 98seeq-
microsoft:windows_ntmicrosoft windows nteq4.0
microsoft:internet_explorermicrosoft internet explorereq6.0

CPE	Name	Operator	Version
microsoft:outlook	microsoft outlook	eq	2000
microsoft:internet_explorer	microsoft internet explorer	eq	5.01
microsoft:windows_xp	microsoft windows xp	eq	-
microsoft:windows_server_2003	microsoft windows server 2003	eq	-
microsoft:windows_98	microsoft windows 98	eq	-
microsoft:internet_explorer	microsoft internet explorer	eq	5.5
microsoft:windows_me	microsoft windows me	eq	-
microsoft:windows_98se	microsoft windows 98se	eq	-
microsoft:windows_nt	microsoft windows nt	eq	4.0
microsoft:internet_explorer	microsoft internet explorer	eq	6.0

References

lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html

lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html

lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html

www.ciac.org/ciac/bulletins/o-191.shtml

www.kb.cert.org/vuls/id/685364

www.securityfocus.com/bid/8530

www.us-cert.gov/cas/techalerts/TA04-212A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025

exchange.xforce.ibmcloud.com/vulnerabilities/16804

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.63 Medium

EPSS

Percentile

97.8%

JSON

Related for CVE-2003-1048

checkpoint_advisories2 cert1 securityvulns2 openvas2