CVE-2005-2127
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."
CVSS Metrics
Affected Products (41)
| Vendor | Product | Version |
|---|---|---|
| ati | catalyst_driver | * |
| microsoft | .net_framework | 1.1 |
| microsoft | .net_framework | 1.1 |
| microsoft | .net_framework | 1.1 |
| microsoft | .net_framework | 1.1 |
| microsoft | office | * |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | 2000 |
| microsoft | office | xp |
| microsoft | office | xp |
| microsoft | office | xp |
| microsoft | project | 98 |
| microsoft | project | 2000 |
| microsoft | project | 2002 |
| microsoft | project | 2002 |
…and 21 more
GitHub Security Advisory GHSA-hfcp-c62f-pjm6
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service...
References (56)
- http://isc.sans.org/diary.php?date=2005-08-18 Third Party Advisory
- http://secunia.com/advisories/16480 Patch, Vendor Advisory
- http://secunia.com/advisories/17172 Permissions Required, Third Party Advisory
- http://secunia.com/advisories/17223 Permissions Required, Third Party Advisory
- http://secunia.com/advisories/17509 Permissions Required, Third Party Advisory
- http://securityreason.com/securityalert/72 Third Party Advisory
- http://securitytracker.com/id?1014727 Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf Third Party Advisory
- http://www.kb.cert.org/vuls/id/740372 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/898241 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/959049 Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/security/advisory/906267.mspx Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/470690/100/0/threaded
- http://www.securityfocus.com/bid/14594 Exploit, Patch, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/15061 Third Party Advisory, VDB Entry
Risk Scores
Top 1% most likely to be exploited