CVE:CVE-2005-4717
CNNVD:CNNVD-200512-665
Windows NT 4.0 SP6a、Windows 2000 SP4、Windows XP SP1、Windows XP SP2和Windows Server 2003 SP1上的Microsoft Internet Explorer 6.0使得远程攻击者通过有缺陷的 HTML文件和CSS文件的某些组合，触发空值引用，可能和渲染含有缺陷IMG标签的DIV元素有关，如IEcrash.htm和IEcrash.rar，来发起拒绝服务攻击(客户端崩溃)。
solution:Upgrade microsoft ie to a higher version than 6.0:sp1,6.0:sp2,and avoid the version 6.0:sp1,6.0:sp2; Upgrade microsoft internet_explorer to a higher version than 6.0,and avoid the version 6.0; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than sp1,and avoid the version sp1; Upgrade microsoft windows_nt to a higher version than 4.0:sp6a,and avoid the version 4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *:sp1,*:sp2,and avoid the version *:sp1,*:sp2