Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Internet Explorer may crash or run code from malicious JPEG

CVE-2005-2308 · published 21 years ago
Summary

Microsoft Internet Explorer's image viewer can be tricked by specially crafted JPEG files to use excessive processor resources, potentially causing the browser to freeze or close. In some cases, this could also allow an attacker to run unwanted code on the user's computer. Update the browser to the latest version or switch to a more secure alternative to protect against this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft ie 6.0
cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
Original advisory text
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, ...
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
17% chance of attack within 30 days
Timeline
Published19 Jul 2005
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2005-2308 · NVD
Track software like this
Free during beta