2.6low

CVE-2004-04841 exploit

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a fo…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
2.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
21.9%
percentile 98%
Public exploits
1
Exploit-DB

Summary

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.

Exploit prediction (EPSS)

21.86% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-365 Microsoft Internet Explorer - Denial of Service · dos · 2004-07-23

CVSS scores

Assigned byVersionScoreVector
NVD2.02.6AV:N/AC:H/Au:N/C:N/I:N/A:P

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.