CVE-2005-0553

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 5.1

EPSS Высокий

Описание

Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".

Ссылки

http://secunia.com/advisories/14922/
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/774338
Patch
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-102A.html
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020
https://exchange.xforce.ibmcloud.com/vulnerabilities/19831
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4874
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4985
http://secunia.com/advisories/14922/
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=228&type=vulnerabilities
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/774338
Patch
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-102A.html
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020
https://exchange.xforce.ibmcloud.com/vulnerabilities/19831
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1695
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3100
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3752

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.70074

Высокий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7w2g-mcx4-m9r4

github

почти 4 года назад