CVE-2005-4843

Internet Explorer - Denial of Service via SmartConnect Class Control

Title source: llm
STIX 2.1

Description

The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/391803

Scores

EPSS 0.1118
EPSS Percentile 95.5%

Details

Status published
Products (1)
microsoft/internet_explorer 7.0
Published Dec 31, 2005
Tracked Since Feb 18, 2026