Description
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
References
- MS02-066 vendor-advisory
- 6216 vdb-entry
- AD20021211 third-party-advisory
- 20021212 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability mailing-list
- oval:org.mitre.oval:def:542 vdb-entry signature
- ie-png-bo(10662) vdb-entry
- 20021211 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability mailing-list
- oval:org.mitre.oval:def:393 vdb-entry signature