CVE-2004-2011 | BDVDB-2026-10091 Detail

Description#

msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a <Ref href> link, which triggers a parsing error, possibly due to missing portions of the URI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=108422549617947&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/16112

Exploit#

No public exploit known

History#

Version 12005-05-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.