Microsoft IE COM Object Embedded CLSID Arbitrary Code Execution Variant 25

Strike ID:
E05-1ja01
CVSS:
5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)
False Positive:
f
Variants:
1
Year:
2005

Description

This strike exploits a flaw in Microsoft Internet Explorer that allows for arbitrary code execution when IE instantiates a COM component as an ActiveX control.

CVE

Bid