Microsoft Windows CE Internet Explorer SSL Unspecified Denial Of Service Vulnerability

Bugtraq ID:	24394
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 08 2007 12:00AM
Updated:	Jun 11 2007 04:10PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Microsoft Windows CE 5.0
Not Vulnerable:

Microsoft Windows CE Internet Explorer SSL Unspecified Denial Of Service Vulnerability

Microsoft Internet Explorer for Windows CE is prone to a denial-of-service vulnerability when running custom Secure Sockets Layer (SSL) web-based programs.

Few technical details are currently available. We will update this BID as more information emerges.

Attackers can exploit this issue to cause denial-of-service conditions.

Microsoft Windows CE Internet Explorer SSL Unspecified Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Microsoft Windows CE Internet Explorer SSL Unspecified Denial Of Service Vulnerability

Solution:
Microsoft has released a fix to address this issue. Please see the reference section for more information.

Microsoft Windows CE Internet Explorer SSL Unspecified Denial Of Service Vulnerability

References:

• KB837392 - How to locate core operating system fixes for Microsoft Windows CE Pl (Microsoft)
  
• Microsoft Windows CE Homepage (Microsoft)
  
• Access Violations on Windows CE are not Security Issues (if you�??re Microsoft) (Ollie Whitehouse)