Info

Disclosure

Jul 03, 2006

Discovery

Unknown

Dates

Exploit

Jul 03, 2006

Solution

Unknown

Description

Microsoft IE contains a flaw that may allow a local denial of service. The issue is triggered when a COM object in OutlookExpress.AddressBook is referred to a null pointer, and will result in loss of availability for the service.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Microsoft Corporation

Internet Explorer

References

CVE ID: 2005-4840 (see also: NVD)
Metasploit ID: 26836
ISS X-Force ID: 34755
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-03/0007.html
Other Advisory URL: http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html
Generic Exploit URL: http://metasploit.com/users/hdm/tools/browserfun/mobb_003.html
Keyword: MoBB #3

Credit

Hdm - Browser fun

Direct URL: http://osvdb.org/26836