CVE

Id
13196  
CVE No.
CVE-2005-1990  
Status
Candidate  
Description
Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.  
Phase
Assigned (20050617)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
95240 13196 CVE-2005-1990 MS:MS05-038  View
95241 13196 CVE-2005-1990 URL:http://www.microsoft.com/technet/Security/bulletin/ms05-038.mspx  View
95242 13196 CVE-2005-1990 CERT:TA05-221A  View
95243 13196 CVE-2005-1990 URL:http://www.us-cert.gov/cas/techalerts/TA05-221A.html  View
95244 13196 CVE-2005-1990 CERT-VN:VU#959049  View
95245 13196 CVE-2005-1990 URL:http://www.kb.cert.org/vuls/id/959049  View
95246 13196 CVE-2005-1990 BID:14511  View
95247 13196 CVE-2005-1990 URL:http://www.securityfocus.com/bid/14511  View
95248 13196 CVE-2005-1990 VUPEN:ADV-2005-1353  View
95249 13196 CVE-2005-1990 URL:http://www.vupen.com/english/advisories/2005/1353  View
95250 13196 CVE-2005-1990 OVAL:oval:org.mitre.oval:def:1061  View
95251 13196 CVE-2005-1990 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1061  View
95252 13196 CVE-2005-1990 OVAL:oval:org.mitre.oval:def:1221  View
95253 13196 CVE-2005-1990 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1221  View
95254 13196 CVE-2005-1990 OVAL:oval:org.mitre.oval:def:1235  View
95255 13196 CVE-2005-1990 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1235  View
95256 13196 CVE-2005-1990 OVAL:oval:org.mitre.oval:def:1337  View
95257 13196 CVE-2005-1990 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1337  View
95258 13196 CVE-2005-1990 OVAL:oval:org.mitre.oval:def:100082  View
95259 13196 CVE-2005-1990 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100082  View
95260 13196 CVE-2005-1990 SECTRACK:1014643  View
95261 13196 CVE-2005-1990 URL:http://securitytracker.com/id?1014643  View
95262 13196 CVE-2005-1990 SECUNIA:16373  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62194 JVNDB-2005-000396 Ruby の XMLRPC モジュールにおけるセキュリティ制限を回避される脆弱性 Ruby に実装されている XMLRPC サーバモジュールでは、utils.rb ライブラリに定義される public_instance_methods() 関数における引数のデフォルト値が不適切に設定されているために、権限の高い関数が公開されてしまう脆弱性が存在します。 CVE-2005-1992 13196 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000396.html  View