CVE-2005-0055

Sažetak

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

Reference

http://secunia.com/secunia_research/2004-12/advisory/
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
http://www.kb.cert.org/vuls/id/843771
http://secunia.com/advisories/11165/
http://securitytracker.com/id?1013125
https://exchange.xforce.ibmcloud.com/vulnerabilities/19137
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

23-07-2021 - 12:55

Objavljeno

02-05-2005 - 04:00