Overview
Microsoft Internet Explorer has a vulnerability that may cause the program to crash when opening some FTP URL's.
Description
Microsoft Internet Explorer with Browsing Enhancements (installed by default on some versions of Windows) may crash when opening an FTP URL containing '#' or '&' characters. |
Impact
Users who open a URL of the forms described above may lose session data and be forced to restart IE. |
Solution
The CERT/CC is currently unaware of a practical solution to this problem. |
Examine URL's of links before clicking them, and do not open URL's of the forms described above. |
Vendor Information
199408
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Elie Aka Lupin Bursztein for discovering this vulnerability.
This document was written by Shawn Van Ittersum.
Other Information
| CVE IDs: | None |
| Severity Metric: | 0.02 |
| Date Public: | 2001-05-11 |
| Date First Published: | 2002-09-16 |
| Date Last Updated: | 2002-09-16 21:58 UTC |
| Document Revision: | 12 |