PT-2005-1175 · Microsoft · Internet Explorer

Andreas Sandblad · Publicado 2005-02-08 · Atualizado 2021-07-23 · CVE-2005-0055

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.01, 5.5, and 6

Description The issue arises from improper buffer validation when handling certain DHTML methods, including the createControlRange Javascript function. This allows remote attackers to execute arbitrary code.

Recommendations For Internet Explorer versions 5.01, 5.5, and 6, consider disabling the createControlRange Javascript function as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0055

Produtos afetados

Internet Explorer

Referências · 13

• http://us-cert.gov/cas/techalerts/TA05-039A.html · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910 · Nota
• http://secunia.com/secunia_research/2004-12/advisory · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710 · Nota
• http://secunia.com/advisories/11165 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0055 · Nota de Segurança
• http://securitytracker.com/id?1013125 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19137 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137 · Nota
• http://kb.cert.org/vuls/id/843771 · Correção