CVE-2005-1790
LOW 2.6EPSS 83.5%
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."
- CVSS v2.0 NVD
- 2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P - EPSS
- 83.47% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2005-06-01
- Updated
- 2024-08-07
Metasploit modules (1)
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/15368
- http://secunia.com/advisories/15546
- http://secunia.com/advisories/18064
- http://secunia.com/advisories/18311
- http://www.vupen.com/english/advisories/2005/2509
- http://www.vupen.com/english/advisories/2005/2867
- http://www.vupen.com/english/advisories/2005/2909
- http://www.kb.cert.org/vuls/id/887861
- http://www.securityfocus.com/bid/13799
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054