PT-2005-3701 · Microsoft · Internet Explorer

Published 2005-12-14 · Updated 2021-07-23 · CVE-2005-2831

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 5.5, and 6

Description The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved through a web page containing embedded CLSIDs that reference specific COM objects not intended for use within the browser.

Recommendations For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider restricting the use of COM objects within the browser as a temporary mitigation measure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2831

Affected Products

Internet Explorer

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2005-2831 · Security Note
• http://securityfocus.com/bid/15827 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA05-347A.html · Patch
• http://osvdb.org/21763 · Note
• http://vupen.com/english/advisories/2005/2867 · Note
• http://securitytracker.com/id?1015348 · Note
• http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1597 · Note
• http://secunia.com/advisories/18064 · Note
• http://secunia.com/advisories/18311 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1520 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23453 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1475 · Note