CVE-2005-0110 — Microsoft IE vulnerability

3 documents3 sources
Severity
2.6LOWNVD
EPSS
2.7%
top 14.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft IE
Timeline
PublishedJan 14
Latest updateMay 1

Description

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/ie6.0

🔴Vulnerability Details

2
GHSA
GHSA-h53f-v293-25qx: Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user in↗2022-05-01
▶
CVEList
CVE-2005-0110: Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user in↗2005-01-19
▶
CVE-2005-0110 — Microsoft IE vulnerability | cvebase