CVE-2006-0057 | BDVDB-2026-14850 Detail

Description#

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/23657
http://www.kb.cert.org/vuls/id/998297
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx
http://www.securityfocus.com/bid/16409
https://exchange.xforce.ibmcloud.com/vulnerabilities/24379

Exploit#

No public exploit known

History#

Version 12006-01-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.