CVE-2005-2308

CVE-2005-2308 describes a denial-of-service vulnerability in the JPEG decoder of Microsoft Internet Explorer, affecting versions 5.0.1 and potentially others. This flaw allows remote attackers to trigger high CPU consumption, application crashes, and potentially arbitrary code execution through specially crafted JPEG images. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, leading to potential confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or Metasploit modules, an ExploitDB entry exists for a denial-of-service proof-of-concept, and it has received minimal community discussion or media coverage.