CVE-2005-0055
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 37%
exploitation probability
37%top 2% of all CVEs
observed exploitation
nono source reports it
Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."
Affected products
n/a · n/aReferences
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014http://secunia.com/advisories/11165/http://secunia.com/secunia_research/2004-12/advisory/http://securitytracker.com/id?1013125https://exchange.xforce.ibmcloud.com/vulnerabilities/19137https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710http://www.kb.cert.org/vuls/id/843771http://www.us-cert.gov/cas/techalerts/TA05-039A.html