GCVE - cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*

part: a version: * update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Internet Explorer (`bbd5d868-ece4-553d-ad32-7763b4ff07af`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6310`	vulnerable	2026-06-08 04:49:28.634138	Details available Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Published: 2006-12-06T20:00:00.000Z Updated: 2024-08-07T20:19:35.216Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21447 http://www.osvdb.org/31325 http://downloads.securityfocus.com/vulnerabilities/exploits/21447.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2384`	vulnerable	2026-06-08 04:49:06.462831	Details available Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability." Published: 2006-06-13T19:00:00.000Z Updated: 2024-08-07T17:51:04.260Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20595 http://www.vupen.com/english/advisories/2006/2319 http://securitytracker.com/id?1016291 http://www.securityfocus.com/bid/18321 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1567	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0585`	vulnerable	2026-06-08 04:48:54.579899	Details available jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null dereference. Published: 2006-02-08T01:00:00.000Z Updated: 2024-08-07T16:41:28.477Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015559 http://www.securityfocus.com/archive/1/425422/30/6890/threaded http://www.securityfocus.com/bid/16441 http://www.securityfocus.com/archive/1/423675/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1093`	vulnerable	2026-06-08 04:44:58.206605	Details available Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-01T17:02:53.660Z Open on db.gcve.eu Reference links http://support.microsoft.com/support/kb/articles/q191/2/00.asp https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011 http://www.iss.net/security_center/static/1276.php	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.