Description
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/23657
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/998297
Patch, Vendor Advisory x_refsource_misc
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16409
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24379
Scores
EPSS
0.1963
EPSS Percentile
97.1%
Details
Status
published
Products (4)
microsoft/ie
6 windows_server_2003_sp1
microsoft/internet_explorer
5.01 sp4
microsoft/internet_explorer
5.5 sp2
microsoft/internet_explorer
6 sp1
Published
Jan 27, 2006
Tracked Since
Feb 18, 2026