oval:org.mitre.oval:def:393

Definition Id: oval:org.mitre.oval:def:393

Oval ID:	oval:org.mitre.oval:def:393
Title:	IE v6.0 Malformed PNG Image File Failure Vulnerability
Description:	Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-1185	Version:	4
Platform(s):	Microsoft Windows 2000	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
the version of mshtml.dll is less than 6.0.2722.900 AND NOT the patch q328970 is installed (Installed Components key) AND NOT the patch q324929 is installed (Installed Components key) AND NOT the patch q810847 is installed (Installed Components key) AND NOT the patch q813489 is installed (Installed Components key) AND NOT the patch q818529 is installed (Installed Components key) AND NOT the patch q822925 is installed (Installed Components key) AND NOT the patch q828750 is installed (Installed Components key) AND NOT the patch q824145 is installed (Installed Components key) AND Internet Explorer 6 is installed