Microsoft Internet Explorer Restricted Sites Malformed URI Denial of Service Vulnerability

Bugtraq ID:	13798
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1791
Remote:	Yes
Local:	No
Published:	May 28 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Discovery is credited to Benjamin Tobias Franz <[email protected]>.
Vulnerable:	Microsoft Internet Explorer 6.0 SP2 - do not use
Not Vulnerable:

Microsoft Internet Explorer Restricted Sites Malformed URI Denial of Service Vulnerability

Microsoft Internet Explorer is affected by a denial of service vulnerability.

The vulnerability presents itself when a user attempts to add a malformed URI to the list of restricted sites.

Microsoft Internet Explorer 6 SP2 is affected by this issue.

Microsoft Internet Explorer Restricted Sites Malformed URI Denial of Service Vulnerability

An exploit is not required.

The following proof of concept URI is sufficient to trigger this issue:
4.3.2.1btf-errorreporting.btf.de

Microsoft Internet Explorer Restricted Sites Malformed URI Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Internet Explorer Restricted Sites Malformed URI Denial of Service Vulnerability

References:

• Microsoft Internet Explorer - Crash on adding sites to restricted zone ("Benjamin Tobias Franz" <[email protected]>)