Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4841
outlook progress ctl
denial of service
internet explorer crash
com object
class
clsid
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
7 High
AI Score
Confidence
High
0.029 Low
EPSS
Percentile
90.8%
The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control’s CLSID, which is not intended for use within Internet Explorer.
Affected configurations
Node
microsoftinternet_explorerMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 7.0 |
References
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
7 High
AI Score
Confidence
High
0.029 Low
EPSS
Percentile
90.8%
Related for CVE-2005-4841