CVE-2006-0057

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 19.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-27 · updated 2026-06-16

Description

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.

Affected products

Microsoft Ie: 6-windows_server_2003_sp1
Microsoft Internet Explorer 11: 5.01-sp4, 5.5-sp2, 6-sp1

References

http://www.kb.cert.org/vuls/id/998297
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx
http://www.osvdb.org/23657
http://www.securityfocus.com/bid/16409
https://exchange.xforce.ibmcloud.com/vulnerabilities/24379
http://www.kb.cert.org/vuls/id/998297
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx
http://www.osvdb.org/23657
http://www.securityfocus.com/bid/16409
https://exchange.xforce.ibmcloud.com/vulnerabilities/24379

Get alerted when CVE-2006-0057 or the next vulnerability affects your stack