CVE-2005-3312

Internet Explorer 6.0 - Cross-Site Scripting via Corrupted Image Files

Title source: llm
STIX 2.1

Description

The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response and file extension indicate that it should be treated as a different file type.

References (5)

Core 5
Core References
Exploit, Vendor Advisory x_refsource_misc
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1746
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/18
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=113017003617987&w=2

Scores

EPSS 0.1189
EPSS Percentile 95.7%

Details

Status published
Products (1)
microsoft/internet_explorer 6.0
Published Oct 26, 2005
Tracked Since Feb 18, 2026