CVE-2005-0055

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."

• http://secunia.com/advisories/11165/
• http://secunia.com/secunia_research/2004-12/advisory/
• http://securitytracker.com/id?1013125
• http://www.kb.cert.org/vuls/id/843771Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19137
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710
• http://secunia.com/advisories/11165/
• http://secunia.com/secunia_research/2004-12/advisory/
• http://securitytracker.com/id?1013125
• http://www.kb.cert.org/vuls/id/843771Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.htmlPatch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19137
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
• CVE-2005-0049Windows SharePoint Services and SharePoint Team Services for…
• CVE-2005-0050The License Logging service for Windows NT Server, Windows 2…
• CVE-2005-0051The Server service (srvsvc.dll) in Windows XP SP1 and SP2 al…
• CVE-2005-0053Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
• CVE-2005-0054Internet Explorer 5.01, 5.5, and 6 allows remote attackers t…
• CVE-2005-0056Internet Explorer 5.01, 5.5, and 6 does not properly validat…
• CVE-2005-0057The Hyperlink Object Library for Windows 98, 2000, XP, and S…
• CVE-2005-0058Buffer overflow in the Telephony Application Programming Int…
• CVE-2005-0059Buffer overflow in the Message Queuing component of Microsof…
• CVE-2005-0060Buffer overflow in the font processing component of Microsof…
• CVE-2005-0061The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2…