GCVE - cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*

part: a version: 6.0 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Internet Explorer (`bbd5d868-ece4-553d-ad32-7763b4ff07af`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3092`	vulnerable	2026-06-08 04:49:46.806396	Details available Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks. Published: 2007-06-06T21:00:00.000Z Updated: 2024-08-07T14:05:28.588Z Open on db.gcve.eu Reference links http://osvdb.org/45437 http://securitytracker.com/id?1018193 http://secunia.com/advisories/25564 http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html http://www.securityfocus.com/archive/1/470446/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7066`	vulnerable	2026-06-08 04:49:30.299365	Details available Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an iframe, deleting the frame by setting its location.href to about:blank, then accessing a property of the object within the deleted frame, which triggers a NULL pointer dereference. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected. Published: 2007-02-27T18:00:00.000Z Updated: 2024-08-07T20:50:06.075Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html http://websecurity.com.ua/3130/ http://www.securityfocus.com/bid/19228 http://browserfun.blogspot.com/2006/07/mobb-30-orphan-object-properties.html https://exchange.xforce.ibmcloud.com/vulnerabilities/28068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5162`	vulnerable	2026-06-08 04:49:19.832458	Details available wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header, which triggers a stack overflow. Published: 2006-10-03T23:00:00.000Z Updated: 2024-08-07T19:41:05.225Z Open on db.gcve.eu Reference links http://www.osvdb.org/29129 https://exchange.xforce.ibmcloud.com/vulnerabilities/27900 https://www.exploit-db.com/exploits/2039 http://www.vupen.com/english/advisories/2006/2917 http://archives.neohapsis.com/archives/bugtraq/2006-07/0379.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3915`	vulnerable	2026-06-08 04:49:10.499473	Details available Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference. Published: 2006-07-28T00:00:00.000Z Updated: 2024-08-07T18:48:39.240Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27932 http://www.vupen.com/english/advisories/2006/2955 http://www.securityfocus.com/bid/19140 http://browserfun.blogspot.com/2006/07/mobb-25-native-function-iterator.html http://www.osvdb.org/27373	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3899`	vulnerable	2026-06-08 04:49:10.419091	Details available Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an invalid memory access inside the SysAllocStringLen function. Published: 2006-07-27T10:00:00.000Z Updated: 2024-08-07T18:48:39.322Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19102 http://www.vupen.com/english/advisories/2006/2916 http://www.osvdb.org/27230 https://exchange.xforce.ibmcloud.com/vulnerabilities/27884 http://browserfun.blogspot.com/2006/07/mobb-21-cenroll-stringtobinary.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3898`	vulnerable	2026-06-08 04:49:10.418690	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3897`	vulnerable	2026-06-08 04:49:10.417028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3729`	vulnerable	2026-06-08 04:49:10.021978	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3605`	vulnerable	2026-06-08 04:49:09.742694	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3591`	vulnerable	2026-06-08 04:49:09.719628	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3512`	vulnerable	2026-06-08 04:49:09.542494	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3511`	vulnerable	2026-06-08 04:49:09.542071	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3427`	vulnerable	2026-06-08 04:49:09.295922	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Internet Explorer

PURL mappings

Vulnerability references

Contribute