CVE-2004-2434

CVE-2004-2434 describes a denial-of-service vulnerability in Microsoft Internet Explorer 6.0 SP1. An attacker can crash the browser by crafting a malicious link containing "::{" that, when a user attempts to "Save As," triggers a null dereference due to an attacker-controlled format string in an error message. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for a remote, low-complexity attack resulting in a partial denial of service. While not listed in CISA KEV, exploit code exists on ExploitDB, and it shows significant community discussion, despite no known active exploitation.