CVE-2005-1990: Medium severity Microsoft ie vulnerability
Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1990?
CVE-2005-1990 has a medium severity rating due to its potential to cause application crashes and execute arbitrary code.
How does CVE-2005-1990 affect Internet Explorer?
CVE-2005-1990 affects Internet Explorer 5.0, 5.5, and 6.0 by allowing attackers to potentially crash the browser or execute arbitrary code through specially crafted web pages.
What versions of Internet Explorer are affected by CVE-2005-1990?
CVE-2005-1990 affects versions 5.0, 5.01, 5.5, and 6.0 of Internet Explorer.
How can I mitigate the risks associated with CVE-2005-1990?
To mitigate CVE-2005-1990, users should upgrade to a newer and supported version of Internet Explorer or consider using alternative web browsers.
Is there a patch available for CVE-2005-1990?
There is no specific patch for CVE-2005-1990; updating to a later version of Internet Explorer is recommended to resolve the vulnerability.