published April 13, 2005
NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.
Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".