What’s Vulnerable › Vulnerabilities

CVE-2005-1665

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 40.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-18 · updated 2026-06-16

Description

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.

Affected products

• Microsoft Corporation ASP.NET: 1.0, 1.1

References

• http://marc.info/?l=bugtraq&m=111513127704270&w=2
• http://scottonwriting.net/sowblog/posts/3747.aspx
• http://secunia.com/advisories/15241
• http://www.osvdb.org/16195
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20408
• http://marc.info/?l=bugtraq&m=111513127704270&w=2
• http://scottonwriting.net/sowblog/posts/3747.aspx
• http://secunia.com/advisories/15241
• http://www.osvdb.org/16195
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20408

Get alerted when CVE-2005-1665 or the next vulnerability affects your stack