Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1922
cve-2004-1922
microsoft
internet explorer
bmp file
memory allocation
denial of service
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size.
Affected configurations
Node
microsoftinternet_explorerMatch5.5
ORmicrosoftinternet_explorerMatch6.0
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
Related for CVE-2004-1922