CVE-2005-4840

Currently unrated

Key Information:

Vendor
Microsoft
Status
Outlook Express Book Control
Vendor
CVE Published:
31 December 2005

Summary

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.

References

http://www.securityfocus.com/archive/1/470694/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/26836
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/34755
vdb-entryx_refsource_XF

EPSS Score

84% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.