受影响系统: Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows XP Professional - Microsoft Windows XP Home - Microsoft Windows NT 4.0 SP6a - Microsoft Windows ME - Microsoft Windows 98 SE - Microsoft Windows 98 - Microsoft Windows 2003 Web Edition - Microsoft Windows 2003 Standard Edition - Microsoft Windows 2003 Enterprise Edition 64-bit - Microsoft Windows 2003 Enterprise Edition - Microsoft Windows 2003 Datacenter Edition 64-bit - Microsoft Windows 2003 Datacenter Edition - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server 技术描述: Microsoft Internet Explorer是一款流行的WEB浏览程序。Microsoft Internet Explorer不正确处理DIV对象的scrollbar-base-color属性,远程攻击者可以利用这个漏洞对目标用户浏览器进行拒绝服务攻击。攻击者可以构建包含畸形DIV对象的scrollbar-base-color属性的页面,诱使用户浏览器访问,可导致浏览器崩溃,产生拒绝服务攻击。 目前厂商还没有提供补丁程序。