CVE-2005-2127

The record

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
• CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
• CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
• CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
• CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
• CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119