Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.532
EPSS Ranking 97.8%