Denial of Service Vulnerability in Pocket Internet Explorer 3.0 by Microsoft
CVE-2003-1275

Currently unrated

Key Information:

Vendor
Microsoft
Status
Pocket Ie
Vendor
CVE Published:
31 December 2003

Summary

Pocket Internet Explorer 3.0 is susceptible to a denial of service condition when an attacker executes a specially crafted JavaScript function. This function utilizes the object.innerHTML property, triggering it to recursively call itself, ultimately leading to a crash of the web browser. This vulnerability can allow remote attackers to disrupt the service for users, posing a significant security threat.

References

http://archives.neohapsis.com/archives/bugtraq/2003-01/00...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/6507
vdb-entryx_refsource_BID
http://www.iss.net/security_center/static/11004.php
vdb-entryx_refsource_XF

EPSS Score

11% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.