CVE-2005-2087: Medium severity Microsoft ie vulnerability
Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2087?
CVE-2005-2087 has a moderate severity rating due to its potential to cause denial of service and possible remote code execution.
How do I fix CVE-2005-2087?
To fix CVE-2005-2087, it is recommended to update to the latest version of Internet Explorer that addresses this vulnerability.
Which versions of Internet Explorer are affected by CVE-2005-2087?
CVE-2005-2087 affects Internet Explorer versions 5.01 SP4 up to 6, including certain versions on Windows and Macintosh operating systems.
What kind of attacks does CVE-2005-2087 enable?
CVE-2005-2087 may allow remote attackers to crash the application or potentially execute arbitrary code by exploiting specific embedded CLSIDs on web pages.
Is there a way to mitigate the risks of CVE-2005-2087 without updating?
While updating is the best protection, users can mitigate risks by disabling scripts and ActiveX controls, which may limit exposure to this vulnerability.