PT-2006-1145 · Microsoft · Internet Explorer

Will Dormann · Published 2006-01-27 · Updated 2021-07-23 · CVE-2006-0057

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01, 5.5, and 6

Description: The issue allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML. This can expose the browser to attacks that would otherwise be prevented by the Kill bit setting.

Recommendations: For Microsoft Internet Explorer versions 5.01, 5.5, and 6, consider applying the fix described in MS05-054 as claimed by CERT/CC, although the details of this fix are not explicitly described in MS05-054.

Fix

Related Identifiers

CVE-2006-0057

Affected Products

Internet Explorer

References · 6

• http://microsoft.com/technet/security/bulletin/ms05-054.mspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0057 · Security Note
• http://kb.cert.org/vuls/id/998297 · Note
• http://osvdb.org/23657 · Note
• http://securityfocus.com/bid/16409 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24379 · Note