Description
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
References
- 1015348 vdb-entry
- 18064 third-party-advisory
- 15827 vdb-entry
- VU#959049 third-party-advisory
- oval:org.mitre.oval:def:1597 vdb-entry signature
- TA05-347A third-party-advisory
- MS05-054 vendor-advisory
- oval:org.mitre.oval:def:1475 vdb-entry signature
- oval:org.mitre.oval:def:1520 vdb-entry signature
- oval:org.mitre.oval:def:1426 vdb-entry signature
- oval:org.mitre.oval:def:1558 vdb-entry signature
- oval:org.mitre.oval:def:1543 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
- 15368 third-party-advisory
- ADV-2005-2909 vdb-entry
- 18311 third-party-advisory
- win-com-activex-execute-code(23453) vdb-entry
- 21763 vdb-entry
- ADV-2005-2867 vdb-entry
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420