PT-2005-3701 · Microsoft · Internet Explorer

Publicado

2005-12-14

·

Atualizado

2021-07-23

·

CVE-2005-2831

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 5.5, and 6
Description The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved through a web page containing embedded CLSIDs that reference specific COM objects not intended for use within the browser.
Recommendations For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider restricting the use of COM objects within the browser as a temporary mitigation measure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-2831

Produtos afetados

Internet Explorer