CVE-2006-0057

Description

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24379

http://www.securityfocus.com/bid/16409

http://www.osvdb.org/23657

http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx

http://www.kb.cert.org/vuls/id/998297

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3