CVE-2005-4843Microsoft Internet Explorer vulnerability

2 documents2 sources
Severity
7.8HIGHNVD
EPSS
14.0%
top 5.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateMay 1

Description

The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-mf8q-f3gh-r43c: The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class as2022-05-01
CVE-2005-4843 — Microsoft vulnerability | cvebase