Signature Detail

HTTP: Internet Explorer Malformed JPEG Marker Header

This signature detects JPEG files with certain invalid JPEG marker headers. If a host views these malformed images served from a malicious Web server, an attacker could take control of vulnerable hosts and run arbitrary code.

Extended Description

Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue was identified by creating random input for the browser, and has not been researched further at this time. This BID will be updated as further information is disclosed. Successful exploitation results in crashing the affected Web browser. This vulnerability also reportedly consumes excessive CPU resources.

Affected Products

• Microsoft Internet Explorer 5.0.1
• Microsoft Internet Explorer 5.0.1 SP1
• Microsoft Internet Explorer 5.0.1 SP2
• Microsoft Internet Explorer 5.0.1 SP3
• Microsoft Internet Explorer 5.0.1 SP4
• Microsoft Internet Explorer 5.5
• Microsoft Internet Explorer 5.5 SP1
• Microsoft Internet Explorer 5.5 SP2
• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0 SP1

References

• BugTraq: 14286
• CVE: CVE-2005-1988
• URL: http://www.microsoft.com/technet/security/bulletin/MS05-038.mspx
• URL: http://www.us-cert.gov/cas/techalerts/TA05-221A.html