CVE-2005-0055

CVE-2005-0055 describes a heap memory corruption vulnerability in Microsoft Internet Explorer versions 5.01, 5.5, and 6. This flaw arises from improper buffer validation when handling specific DHTML methods, such as the createControlRange JavaScript function. An unauthenticated remote attacker can exploit this by enticing a user to a malicious webpage, leading to arbitrary code execution with the privileges of the logged-in user. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), its high CVSS score of 7.5 and FAUCET Risk Score of 97/100 indicate significant potential impact. Community discussion and media coverage for this vulnerability are minimal.