CVE-2005-0055

HIGH 7.5CVE-2005-0055 · Published 02/05/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
ie microsoft	`= 6.0`	No fix yet
internet explorer microsoft	`= 5.0.1= 5.5= 6.0`	No fix yet

Description

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

References

secunia.com/advisories/11165
secunia.com/secunia_research/2004-12/advisory
securitytracker.com/id
kb.cert.org/vuls/id/843771 · Patch
us-cert.gov/cas/techalerts/TA05-039A.html · Patch
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014
exchange.xforce.ibmcloud.com/vulnerabilities/19137
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free