CVE-2005-4844: High severity internet explorer vulnerability
The CLSIDApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4844?
CVE-2005-4844 has a severity rating of medium, primarily due to its ability to cause a denial of service in Internet Explorer.
How does CVE-2005-4844 allow an attacker to impact Internet Explorer?
CVE-2005-4844 allows an attacker to create a COM object that can crash Internet Explorer by exploiting the CLSID_ApprenticeICW control.
Which versions of Internet Explorer are affected by CVE-2005-4844?
CVE-2005-4844 affects all versions of Internet Explorer up to and including 7.0.
What should users do to protect against CVE-2005-4844?
To protect against CVE-2005-4844, users should upgrade to a newer version of Internet Explorer that is not vulnerable.
Is there a patch available for CVE-2005-4844?
No specific patch for CVE-2005-4844 is available; the best solution is to update to a non-vulnerable version of Internet Explorer.