CVE-2005-1790
EXPLOITEDMicrosoft Internet Explorer 6.0.2900.2180 and 6.0.2800.1106 - Remote Code Execution via JavaScript BODY onload Event
Title source: llmExploitation Summary
CVE-2005-1790 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, Benjamin Tobias Franz, Stuart Pearson, Sam Sharps, including a Metasploit module exploits/windows/browser/ms05_054_onload.
AI-analyzed exploit summary This exploit targets a vulnerability in Microsoft Internet Explorer 6 (CVE-2005-1790) by leveraging a JavaScript 'onLoad' handler and improperly initialized 'window()' function to achieve remote code execution via heap spraying and shellcode injection.
Description
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."
Exploits (2)
This exploit targets a vulnerability in Microsoft Internet Explorer 6 (CVE-2005-1790) by leveraging a JavaScript 'onLoad' handler and improperly initialized 'window()' function to achieve remote code execution via heap spraying and shellcode injection.
This Metasploit module exploits CVE-2005-1790, a vulnerability in Microsoft Internet Explorer 6 where improper handling of JavaScript 'onLoad' events with the 'window()' function leads to remote code execution. The exploit uses heap spraying and crafted prompts to achieve arbitrary code execution.