01 Record

CVE-2005-2127

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that

UnratedPUBLISHEDCNA: microsoft

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 63.24% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 99.2% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2005-08-19 04:00Z21 YR AGO

Last updated

2024-08-07 22:15Z2 YR AGO

Reserved

2005-07-02

Assigning CNA

microsoft

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass

Data version

5.1

Document digest

e8bd98c0a5b55bf47db4e12afc2bde73d8631882c3f4def4aba9b6375774958c

05 Affected products

VendorProductVersionsPlatforms

aticatalyst_driverNot specified—

microsoft.net_frameworkNot specified—

microsoftofficeNot specified—

microsoftprojectNot specified—

microsoftvisioNot specified—

microsoftvisual_studio_.netNot specified—

06 References

www.kb.cert.orgVU#959049http://www.kb.cert.org/vuls/id/959049third-party-advisoryx_refsource_CERT-VN
isc.sans.orghttp://isc.sans.org/diary.php?date=2005-08-18x_refsource_MISC
www.securityfocus.com20070606 IE 6/Microsoft Html Popup Window (mshtml.dll) DoShttp://www.securityfocus.com/archive/1/470690/100/0/threadedmailing-listx_refsource_BUGTRAQ
securityreason.com72http://securityreason.com/securityalert/72third-party-advisoryx_refsource_SREASON
support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2005-214.pdfx_refsource_CONFIRM
www.us-cert.govTA05-347Ahttp://www.us-cert.gov/cas/techalerts/TA05-347A.htmlthird-party-advisoryx_refsource_CERT
docs.microsoft.comMS05-052https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-052vendor-advisoryx_refsource_MS
www.securityfocus.com15061http://www.securityfocus.com/bid/15061vdb-entryx_refsource_BID
secunia.com17223http://secunia.com/advisories/17223third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:1454https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1454vdb-entrysignaturex_refsource_OVAL
secunia.com16480http://secunia.com/advisories/16480third-party-advisoryx_refsource_SECUNIA
www.microsoft.comhttp://www.microsoft.com/technet/security/advisory/906267.mspxx_refsource_MISC
exchange.xforce.ibmcloud.commicrosoft-ie-mshtml-dos(34754)https://exchange.xforce.ibmcloud.com/vulnerabilities/34754vdb-entryx_refsource_XF
secunia.com17172http://secunia.com/advisories/17172third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:1538https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1538vdb-entrysignaturex_refsource_OVAL
exchange.xforce.ibmcloud.comWin-msdss-command-execution(21895)https://exchange.xforce.ibmcloud.com/vulnerabilities/21895vdb-entryx_refsource_XF
oval.cisecurity.orgoval:org.mitre.oval:def:1535https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1535vdb-entrysignaturex_refsource_OVAL
www.securityfocus.com14594http://www.securityfocus.com/bid/14594vdb-entryx_refsource_BID
oval.cisecurity.orgoval:org.mitre.oval:def:1468https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1468vdb-entrysignaturex_refsource_OVAL
secunia.com17509http://secunia.com/advisories/17509third-party-advisoryx_refsource_SECUNIA
www.us-cert.govTA06-220Ahttp://www.us-cert.gov/cas/techalerts/TA06-220A.htmlthird-party-advisoryx_refsource_CERT
oval.cisecurity.orgoval:org.mitre.oval:def:1464https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1464vdb-entrysignaturex_refsource_OVAL
www.kb.cert.orgVU#740372http://www.kb.cert.org/vuls/id/740372third-party-advisoryx_refsource_CERT-VN
www.kb.cert.orgVU#898241http://www.kb.cert.org/vuls/id/898241third-party-advisoryx_refsource_CERT-VN
securitytracker.com1014727http://securitytracker.com/id?1014727vdb-entryx_refsource_SECTRACK
www.us-cert.govTA05-284Ahttp://www.us-cert.gov/cas/techalerts/TA05-284A.htmlthird-party-advisoryx_refsource_CERT
www.vupen.comADV-2005-1450http://www.vupen.com/english/advisories/2005/1450vdb-entryx_refsource_VUPEN
oval.cisecurity.orgoval:org.mitre.oval:def:1155https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1155vdb-entrysignaturex_refsource_OVAL