CVE-2005-0055

no score yetEPSS 37%

microsoft: no CVSS score yet. EPSS 37% chance of exploitation in the next 30 days.

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

EPSS: 37% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2005-05-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:ie
microsoft:internet_explorer

References

http://secunia.com/advisories/11165/
http://secunia.com/secunia_research/2004-12/advisory/
http://securitytracker.com/id?1013125
http://www.kb.cert.org/vuls/id/843771
http://www.us-cert.gov/cas/techalerts/TA05-039A.html

Check your stack JSON