CVE-2005-2831
- State
- Published
- Severity
- Not scored
- Published
- Dec 14, 2005
- Updated
- Aug 7, 2024
- Reserved
- Sep 7, 2005
Description
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1015348vdb-entry
- 18064third-party-advisory
- 15827vdb-entry
- VU#959049third-party-advisory
- oval:org.mitre.oval:def:1597vdb-entrysignature
- TA05-347Athird-party-advisory
- MS05-054vendor-advisory
- oval:org.mitre.oval:def:1475vdb-entrysignature
- oval:org.mitre.oval:def:1520vdb-entrysignature
- oval:org.mitre.oval:def:1426vdb-entrysignature
- oval:org.mitre.oval:def:1558vdb-entrysignature
- oval:org.mitre.oval:def:1543vdb-entrysignature
- http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
- 15368third-party-advisory
- ADV-2005-2909vdb-entry
- 18311third-party-advisory
- win-com-activex-execute-code(23453)vdb-entry
- 21763vdb-entry
- ADV-2005-2867vdb-entry
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.