← Database

CVE-2004-2011

LOW CVSS: 2.6 Published: 2004-12-31 Modified: 2026-06-16

Description

msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a link, which triggers a parsing error, possibly due to missing portions of the URI.

Affected Platforms

Microsoft Internet Explorer

Weakness Type

NVD-CWE-Other

References