CVE-2006-0057: High severity Microsoft Internet Explorer vulnerability
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0057?
CVE-2006-0057 is classified as a moderate severity vulnerability that could allow remote attackers to bypass security settings.
How do I fix CVE-2006-0057?
To fix CVE-2006-0057, users should upgrade to a more secure version of Internet Explorer or apply security patches recommended by Microsoft.
Which versions of Internet Explorer are affected by CVE-2006-0057?
CVE-2006-0057 affects Microsoft Internet Explorer versions 5.01, 5.5, and 6, specifically with certain service pack levels.
What type of attacks does CVE-2006-0057 expose users to?
CVE-2006-0057 can expose users to potential remote code execution attacks that exploit the vulnerable ActiveX controls.
Are there any mitigations for CVE-2006-0057?
Users can mitigate CVE-2006-0057 by employing stricter security settings and disabling ActiveX controls in Internet Explorer.