PT-2006-1145 · Microsoft · Internet Explorer

Will Dormann · Publicado 2006-01-27 · Atualizado 2021-07-23 · CVE-2006-0057

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01, 5.5, and 6

Description: The issue allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML. This can expose the browser to attacks that would otherwise be prevented by the Kill bit setting.

Recommendations: For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider applying the fix described in MS05-054 as claimed by CERT/CC, although the details of this fix are not explicitly described in MS05-054.

Correção

Identificadores relacionados

CVE-2006-0057

Produtos afetados

Internet Explorer

Referências · 6

• http://kb.cert.org/vuls/id/998297 · Nota
• http://osvdb.org/23657 · Nota
• http://microsoft.com/technet/security/bulletin/ms05-054.mspx · Aviso do Fabricante
• http://securityfocus.com/bid/16409 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0057 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24379 · Nota