CVE-2005-2127

CVE-2005-2127 describes a critical vulnerability in Microsoft Internet Explorer versions 5.01, 5.5, and 6, allowing remote attackers to trigger a denial of service or potentially execute arbitrary code. This is achieved by embedding CLSIDs in a webpage that reference specific COM objects not intended for browser use, such as the DDS Library Shape Control (Msdds.dll) and numerous others. The vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild, an exploit for remote code execution via msdds.dll exists on ExploitDB, and the vulnerability has a high FAUCET Risk Score of 97/100, despite limited community discussion or media coverage.