CVSS: 5.0EPSS: 96%CPEs: 11EXPL: 1CVE-2005-2087 – Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow
https://notcve.org/view.php?id=CVE-2005-2087
Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem. • https://www.exploit-db.com/exploits/1079 http://marc.info/?l=bugtraq&m=112006764714946&w=2 http://secunia.com/advisories/15891 http://securitytracker.com/id?1014329 http://www.auscert.org.au/render.html?it=5225 http://www.kb.cert.org/vuls/id/939605 http://www.kb.cert.org/vuls/id/959049 http://www.microsoft.com/technet/security/advisory/903144.mspx http://www.osvdb.org/17680 http://www.securityfocus.com/archive/1/404055 http://www.securityfocus.com/bid/ • CWE-399: Resource Management Errors •
CVSS: 2.6EPSS: 97%CPEs: 2EXPL: 1CVE-2005-1790 – Microsoft Internet Explorer - JavaScript OnLoad Handler Remote Code Execution (MS05-054)
https://notcve.org/view.php?id=CVE-2005-1790
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability." • https://www.exploit-db.com/exploits/18365 http://marc.info/?l=bugtraq&m=111746394106172&w=2 http://marc.info/?l=bugtraq&m=111755552306013&w=2 http://secunia.com/advisories/15368 http://secunia.com/advisories/15546 http://secunia.com/advisories/18064 http://secunia.com/advisories/18311 http://securitytracker.com/id?1015251 http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf http://www.computerterrorism.com/research/ie/ct21-11-2005 http://www.kb.cert.org/ • CWE-399: Resource Management Errors •