Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-1790Out-of-bounds Write in Microsoft Internet Explorer

CWE-3995 documents5 sources
Severity
2.6LOWNVD
EPSS
81.6%
top 0.81%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedJun 1
Latest updateMay 1

Description

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

NVDmicrosoft/internet_explorer6.0.2800.1106, 6.0.2900.2180+1

🔴Vulnerability Details

2
GHSA
GHSA-368p-45pv-mjr9: Microsoft Internet Explorer 6 SP2 62022-05-01
VulnCheck
Microsoft Internet Explorer Javascript BODY onload Vulnerability2005

💥Exploits & PoCs

2
Exploit-DB
Microsoft Internet Explorer - JavaScript OnLoad Handler Remote Code Execution (MS05-054) (Metasploit)2012-01-14
Metasploit
MS05-054 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution