GCVE - cpe:2.3:a:microsoft:ie:6.0:sp1:windows_2000:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:6.0:sp1:windows_2000:*:*:*:*:*

part: a version: 6.0 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	windows_2000
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-7065`	vulnerable	2026-06-08 04:49:30.284926	Details available Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference. Published: 2007-02-27T18:00:00.000Z Updated: 2024-09-16T19:52:09.463Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19364 http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0163.html http://www3.ca.com/be/securityadvisor/vulninfo/Vuln.aspx?ID=34511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3510`	vulnerable	2026-06-08 04:49:09.541579	Details available The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read. Published: 2006-07-11T22:00:00.000Z Updated: 2024-08-07T18:30:34.314Z Open on db.gcve.eu Reference links http://www.osvdb.org/26955 http://www.vupen.com/english/advisories/2006/2718 http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html https://exchange.xforce.ibmcloud.com/vulnerabilities/27621 http://www.securityfocus.com/bid/18900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4827`	vulnerable	2026-06-08 04:48:45.280514	Details available Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks. Published: 2007-02-07T20:00:00.000Z Updated: 2024-08-08T00:01:23.269Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2007/Feb/0081.html http://www.securityfocus.com/archive/1/459172/100/0/threaded http://www.securityfocus.com/bid/14969 http://www.securityfocus.com/archive/1/459172/100/0/threaded http://www.securityfocus.com/archive/1/411585	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.