GCVE - cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*

part: a version: 5.22 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2576`	vulnerable	2026-06-08 04:51:29.228393	Details available Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected. Published: 2009-07-22T18:00:00.000Z Updated: 2024-08-07T05:59:55.640Z Open on db.gcve.eu Reference links http://websecurity.com.ua/3338/ http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html http://www.securityfocus.com/archive/1/505120/100/0/threaded http://www.securityfocus.com/archive/1/505092/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2069`	vulnerable	2026-06-08 04:51:26.587621	Details available Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request. Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.956Z Open on db.gcve.eu Reference links http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://www.securityfocus.com/bid/35411 http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2057`	vulnerable	2026-06-08 04:51:26.373656	Details available Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack. Published: 2009-06-15T19:00:00.000Z Updated: 2024-09-17T01:11:07.908Z Open on db.gcve.eu Reference links http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1559`	vulnerable	2026-06-08 04:47:47.894954	Details available Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Published: 2008-07-14T23:00:00.000Z Updated: 2024-08-08T02:35:16.504Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/348574 http://www.gadgetopia.com/2003/12/23/OutlookWebAccessPrivacyHole.html http://www.securityfocus.com/bid/9295 http://www.securityfocus.com/archive/1/348360 http://securityreason.com/securityalert/3989	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.