GCVE - cpe:2.3:a:microsoft:ie:6.0:*:windowsxp:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:6.0:*:windowsxp:*:*:*:*:*

part: a version: 6.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	windowsxp
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-7065`	vulnerable	2026-06-08 04:49:30.283890	Details available Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference. Published: 2007-02-27T18:00:00.000Z Updated: 2024-09-16T19:52:09.463Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19364 http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.html http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3471`	vulnerable	2026-06-08 04:49:09.467149	Details available Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which triggers a null dereference, as demonstrated using the appendChild method. Published: 2006-07-10T19:00:00.000Z Updated: 2024-08-07T18:30:33.688Z Open on db.gcve.eu Reference links http://www.osvdb.org/26837 http://browserfun.blogspot.com/2006/07/mobb-7-tableframeset.html https://exchange.xforce.ibmcloud.com/vulnerabilities/27592 http://www.securityfocus.com/bid/18873 http://www.vupen.com/english/advisories/2006/2701	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4827`	vulnerable	2026-06-08 04:48:45.279414	Details available Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks. Published: 2007-02-07T20:00:00.000Z Updated: 2024-08-08T00:01:23.269Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2007/Feb/0081.html http://www.securityfocus.com/archive/1/459172/100/0/threaded http://www.securityfocus.com/bid/14969 http://www.securityfocus.com/archive/1/459172/100/0/threaded http://www.securityfocus.com/archive/1/411585	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.