CVE-2004-1922
Microsoft Internet Explorer 5.5 and 6.0 - Denial of Service via BMP Memory Allocation
Title source: llmDescription
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size.
References (1)
Core 1
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108183130827872&w=2
Scores
EPSS
0.0679
EPSS Percentile
93.3%
Details
Status
published
Products (2)
microsoft/internet_explorer
5.5
microsoft/internet_explorer
6.0
Published
Apr 11, 2004
Tracked Since
Feb 18, 2026