CVE-2005-2087 Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly...
MediumCVSS 5.0
EPSS 61.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 5.1 | No fix listed |
| Microsoft ie | = 5.2.3 | No fix listed |
| Microsoft ie | = 6-windows_server_2003_sp1 | No fix listed |
| Microsoft internet explorer | = 5.1 | No fix listed |
| Microsoft internet explorer | = 5.01-sp4 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 5.5-preview | No fix listed |
| Microsoft internet explorer | = 5.5-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 6.0.2900.2180 | No fix listed |
References
- 20050629 SEC-CONSULT SA-20050629-0 mailing-list
- 15891 third-party-advisory vendor-advisory
- 1014329 vdb-entry
- ESB-2005.0489 third-party-advisory
- VU#939605 third-party-advisory us-government-resource
- VU#959049 third-party-advisory us-government-resource
- www.microsoft.com
- 17680 vdb-entry
- 20050702 Microsoft Internet Explorer "javaprxy.dll" Code Execution Exploit mailing-list
- 14087 vdb-entry
- TA05-193A third-party-advisory us-government-resource
- ADV-2005-0935 vdb-entry vendor-advisory
- MS05-037 vendor-advisory
- ie-javaprxydll-execute-code(21193) vdb-entry
- oval:org.mitre.oval:def:1326 signature vdb-entry
- oval:org.mitre.oval:def:1506 signature vdb-entry
- oval:org.mitre.oval:def:1518 signature vdb-entry
- oval:org.mitre.oval:def:793 signature vdb-entry