Back

CVE-2005-0554

Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."

Published: May 2, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (3)

Vendor Product Version
microsoft internet_explorer 5.01
microsoft internet_explorer 5.5
microsoft internet_explorer 6.0

GitHub Security Advisory GHSA-q6gx-8c6w-34hg

Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 57.91%

Top 1% most likely to be exploited

Threat Score 47.4 / 100

Data Sources

NVD EPSS GitHub