CVE-2005-2831
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service...
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
- Record
CVE-2005-2831- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
- Record
CVE-2005-2831- Updated
- 2026-11-02
EUVDEUVD-2005-2832 No score
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
- Record
EUVD-2005-2832- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2vf-jw82-xqc6 No score
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service...
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
- Record
GHSA-h2vf-jw82-xqc6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2831 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published December 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 30.1%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1015348
secunia.com/advisories/18064
securityfocus.com/bid/15827
kb.cert.org/vuls/id/959049
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1597
us-cert.gov/cas/techalerts/TA05-347A.html
Show 16 moreShow less
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054
support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
vupen.com/english/advisories/2005/2909
exchange.xforce.ibmcloud.com/vulnerabilities/23453
osvdb.org/21763
www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
nvd.nist.gov/vuln/detail/CVE-2005-2831
github.com/advisories/GHSA-h2vf-jw82-xqc6