CVE-2005-0055

Description

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005

https://exchange.xforce.ibmcloud.com/vulnerabilities/19137

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014

http://www.us-cert.gov/cas/techalerts/TA05-039A.html

http://www.kb.cert.org/vuls/id/843771

http://securitytracker.com/id?1013125

http://secunia.com/secunia_research/2004-12/advisory/

http://secunia.com/advisories/11165/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS