CVE-2002-1185
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
Scoring
- CVSS base score
- 1.17
- EPSS probability
- 29.20%
- Published
- 2004-09-01
- Last modified
- 2026-03-16
Affected products
- n/a n/a