CVE-2005-4844

The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-09-17

Affected products

• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/archive/1/391803