CVE-2005-1990: microsoft ie
Vulnerability summary
CVE-2005-1990 is a medium (CVSS 5.1) vulnerability in microsoft ie. EPSS estimates a 48.51% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 10-08-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
48.51%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 48.51% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Internet Explorer - 'blnmgr.dll' COM Object Remote (MS05-038)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
- ie6:windows_server_2003_sp1
- internet_explorer5.01 | 5.5
1 vendor · 2 products
References
12 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1235VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1061VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1221VDB EntrySignatureX Refsource OVAL
- www.us-cert.gov/cas/techalerts/TA05-221A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1337VDB EntrySignatureX Refsource OVAL