CVE-2005-2831

Опубликовано: 14 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.51558

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h2vf-jw82-xqc6

github

почти 4 года назад