CVE-2005-2308

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-07-19 · updated 2026-06-16

Description

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg.

Affected products

Microsoft Ie: 6.0-sp2

References

http://lcamtuf.coredump.cx/crash
http://www.securityfocus.com/archive/1/405298
http://www.securityfocus.com/bid/14284
http://www.securityfocus.com/bid/14285
http://www.securityfocus.com/bid/14286
http://lcamtuf.coredump.cx/crash
http://www.securityfocus.com/archive/1/405298
http://www.securityfocus.com/bid/14284
http://www.securityfocus.com/bid/14285
http://www.securityfocus.com/bid/14286

Get alerted when CVE-2005-2308 or the next vulnerability affects your stack