Executive Summary

Informations
Name CVE-2005-2831 First vendor Publication 2005-12-14
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2831

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:1426
 
Oval ID: oval:org.mitre.oval:def:1426
Title: WinXP,SP2 COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 8
Platform(s): Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1475
 
Oval ID: oval:org.mitre.oval:def:1475
Title: Server 2003 COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 7
Platform(s): Microsoft Windows Server 2003
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1520
 
Oval ID: oval:org.mitre.oval:def:1520
Title: WinXP,SP1 (64-bit) COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 7
Platform(s): Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1543
 
Oval ID: oval:org.mitre.oval:def:1543
Title: Server 2003,SP1 COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 7
Platform(s): Microsoft Windows Server 2003
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1558
 
Oval ID: oval:org.mitre.oval:def:1558
Title: Win2K,SP4 COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 8
Platform(s): Microsoft Windows 2000
 Product(s): Microsoft Internet Explorer
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:1597
 
Oval ID: oval:org.mitre.oval:def:1597
Title: Win2K/XP,SP1 COM Object Instantiation Memory Corruption Vulnerability
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Family: windows Class: vulnerability
Reference(s): CVE-2005-2831
 Version: 7
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
 Product(s): Microsoft Internet Explorer
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2
Application 9

ExploitDB Exploits

id Description
2012-01-14 Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution V...

Open Source Vulnerability Database (OSVDB)

Id Description
21763 Microsoft IE Embedded CLSID COM Object Arbitrary Code Execution

Microsoft Internet Explorer contains a flaw that may allow a malicious user to corrupt memory. The issue is triggered when the user accesses a maliciously crafted web page that instantiates COM objects which were not intended for use with IE, as ActiveX controls. It is possible that the flaw may allow for arbitrary code execution resulting in a loss of integrity.

Snort® IPS/IDS

Date Description
2014-01-10 Microsoft Internet Explorer javascript onload prompt obfuscation overflow att...
RuleID : 4917 - Revision : 16 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer javascript onload document.write obfuscation over...
RuleID : 4916 - Revision : 15 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer Shortcut Handler ActiveX object access
RuleID : 4915 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Script Definition ActiveX object access
RuleID : 4914 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Workspace ActiveX object access
RuleID : 4913 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Root ActiveX object access
RuleID : 4912 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Type Library ActiveX object access
RuleID : 4911 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Relationship Definition ActiveX object...
RuleID : 4910 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Property Definition ActiveX object access
RuleID : 4909 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Method Definition ActiveX object access
RuleID : 4908 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Collection Definition ActiveX object a...
RuleID : 4907 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Interface Definition ActiveX object ac...
RuleID : 4906 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Object ActiveX object access
RuleID : 4905 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Repository Alias ActiveX object access
RuleID : 4904 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer VMR ImageSync 9 ActiveX object access
RuleID : 4903 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Video Mixing Renderer 9 ActiveX object access
RuleID : 4902 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer VMR Allocator Presenter 9 ActiveX object access
RuleID : 4901 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Outlook Progress Ctl ActiveX object access
RuleID : 4900 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer ISupportErrorInfo Interface ActiveX object access
RuleID : 4899 - Revision : 17 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeComp ActiveX object access
RuleID : 4898 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSOAInterface ActiveX object access
RuleID : 4897 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeLib ActiveX object access
RuleID : 4896 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSTypeInfo ActiveX object access
RuleID : 4895 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer PSEnumVariant ActiveX object access
RuleID : 4894 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer Trident HTMLEditor ActiveX object access
RuleID : 4893 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer MTSEvents Class ActiveX object access
RuleID : 4892 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer cfw Class ActiveX object access
RuleID : 4891 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer IAVIStream & IAVIFile Proxy ActiveX object ac...
RuleID : 4890 - Revision : 14 - Type : BROWSER-PLUGINS
2014-01-10 Microsoft Internet Explorer javascript onload overflow attempt
RuleID : 4647 - Revision : 17 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer File Download Dialog Box Manipulation
RuleID : 17463 - Revision : 13 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer HTTPS proxy information disclosure vulnerability
RuleID : 17448 - Revision : 11 - Type : BROWSER-IE
2014-01-10 Microsoft Internet Explorer Address ActiveX clsid access
RuleID : 11252 - Revision : 13 - Type : BROWSER-PLUGINS
2014-01-10 Sony Rootkit Uninstaller ActiveX clsid unicode access
RuleID : 11251 - Revision : 6 - Type : WEB-ACTIVEX
2014-01-10 Sony Rootkit Uninstaller ActiveX clsid access
RuleID : 11250 - Revision : 12 - Type : BROWSER-PLUGINS
2014-01-10 IE Address ActiveX clsid unicode access
RuleID : 11249 - Revision : 7 - Type : WEB-ACTIVEX

Nessus® Vulnerability Scanner

Date Description
2006-02-14 Name : Arbitrary code can be executed on the remote host through the web client.
File : smb_nt_ms06-004.nasl - Type : ACT_GATHER_INFO
2005-12-13 Name : Arbitrary code can be executed on the remote host through the web client.
File : smb_nt_ms05-054.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://secunia.com/advisories/15368
http://secunia.com/advisories/18064
http://secunia.com/advisories/18311
http://securitytracker.com/id?1015348
http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
http://www.kb.cert.org/vuls/id/959049
http://www.osvdb.org/21763
http://www.securityfocus.com/bid/15827
http://www.us-cert.gov/cas/techalerts/TA05-347A.html
http://www.vupen.com/english/advisories/2005/2867
http://www.vupen.com/english/advisories/2005/2909
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&a...
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05...
https://exchange.xforce.ibmcloud.com/vulnerabilities/23453
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Date Informations
2024-11-28 23:21:28
  • Multiple Updates
2024-11-28 12:07:24
  • Multiple Updates
2021-07-27 00:24:36
  • Multiple Updates
2021-07-24 01:44:14
  • Multiple Updates
2021-07-24 01:02:04
  • Multiple Updates
2021-07-23 17:24:40
  • Multiple Updates
2021-07-23 01:44:02
  • Multiple Updates
2021-07-23 01:02:02
  • Multiple Updates
2021-07-22 21:24:58
  • Multiple Updates
2021-05-04 12:03:10
  • Multiple Updates
2021-04-22 01:03:26
  • Multiple Updates
2020-05-23 00:16:48
  • Multiple Updates
2018-10-13 00:22:32
  • Multiple Updates
2017-10-11 09:23:34
  • Multiple Updates
2017-07-11 12:02:00
  • Multiple Updates
2016-06-28 15:21:25
  • Multiple Updates
2016-04-26 13:47:21
  • Multiple Updates
2014-02-17 10:32:47
  • Multiple Updates
2014-01-19 21:22:53
  • Multiple Updates
2013-05-11 11:31:07
  • Multiple Updates