← Back

CVE-2005-0055

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

Affected (11)

2 products
Ie
Internet Explorer
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 6.0 sp1
Version 6.0 sp2
Microsoft
Version 5.0.1
Version 5.0.1 sp1
Version 5.0.1 sp2
Version 5.0.1 sp3
Version 5.0.1 sp4
Version 5.5
Version 5.5 sp1
Version 5.5 sp2
Version 6.0

References (24)

Source: cve@mitre.org
PatchUS Government Resource
Source: cve@mitre.org
PatchUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.