CVE-2005-0553 Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web pag...
MediumCVSS 5.1
EPSS 50.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 5.01-sp3 | No fix listed |
| Microsoft internet explorer | = 5.01-sp4 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 14922 patch third-party-advisory vendor-advisory
- 20050412 Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability patch third-party-advisory vendor-advisory
- VU#774338 patch third-party-advisory us-government-resource
- TA05-102A patch third-party-advisory us-government-resource
- MS05-020 vendor-advisory
- ie-dhtml-bo(19831) vdb-entry
- oval:org.mitre.oval:def:1695 signature vdb-entry
- oval:org.mitre.oval:def:3100 signature vdb-entry
- oval:org.mitre.oval:def:3752 signature vdb-entry
- oval:org.mitre.oval:def:4874 signature vdb-entry
- oval:org.mitre.oval:def:4985 signature vdb-entry