7.5
CVSSv2

CVE-2005-0053

Published: 02/05/2005 Updated: 23/07/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Internet Explorer 5.01, 5.5, and 6 allows remote malicious users to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet explorer 5.0.1

microsoft internet explorer 5.5

microsoft internet explorer 6.0

microsoft ie 6.0

microsoft windows 2000

microsoft windows 2003 server standard

microsoft windows 2003 server web

microsoft windows xp

microsoft windows 2003 server enterprise

microsoft windows 2003 server enterprise_64-bit

microsoft windows me

microsoft windows 98

microsoft windows 98se

microsoft windows 2003 server r2

Exploits

source: wwwsecurityfocuscom/bid/11466/info The Microsoft cumulative Internet Explorer patch (MS04-038) attempted to limit what files may be dragged and dropped onto the local computer from the Internet Zone to prevent executable objects from being placed on the file system in this manner However, a number of file types are still permit ...