CVE-2004-0842

CVE-2004-0842 describes a denial-of-service vulnerability affecting Microsoft Internet Explorer 6.0 SP1 and earlier, caused by malformed CSS elements that trigger heap-based buffer overflows and application crashes. This vulnerability has a CVSS score of 7.5, indicating a high severity with a network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code for a similar issue exists on ExploitDB, and despite its high EPSS and FAUCET risk scores, there is no evidence of active exploitation or significant community discussion.