GCVE - cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*

part: a version: 6 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Internet Explorer (`bbd5d868-ece4-553d-ad32-7763b4ff07af`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-2557`	vulnerable	2026-06-08 05:02:04.833249	Details available Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability." Published: 2012-09-21T21:00:00.000Z Updated: 2024-08-06T19:34:25.892Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027555 http://www.us-cert.gov/cas/techalerts/TA12-255A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15745 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063 http://www.securityfocus.com/bid/55647	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2064`	vulnerable	2026-06-08 04:51:26.522499	Details available Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages." Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.943Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/51186 http://www.securityfocus.com/bid/35403 http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0072`	vulnerable	2026-06-08 04:51:07.557880	Details available Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element. Published: 2009-01-08T19:00:00.000Z Updated: 2024-08-07T04:24:17.133Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/47788 http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/ http://www.securityfocus.com/bid/33149	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2259`	vulnerable	2026-06-08 04:50:23.344698	Details available Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability." Published: 2008-08-13T10:00:00.000Z Updated: 2024-08-07T08:58:01.692Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2349 http://www.securityfocus.com/bid/30612 http://www.us-cert.gov/cas/techalerts/TA08-225A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5913 http://www.securitytracker.com/id?1020674	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2258`	vulnerable	2026-06-08 04:50:23.344277	Details available Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object "appended in a specific order" with "particular functions ... performed on" document objects, aka "HTML Objects Memory Corruption Vulnerability" or "Table Layout Memory Corruption Vulnerability," a different vulnerability than CVE-2008-2257. Published: 2008-08-13T10:00:00.000Z Updated: 2024-08-07T08:58:00.646Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/495431/100/0/threaded http://www.vupen.com/english/advisories/2008/2349 http://www.zerodayinitiative.com/advisories/ZDI-08-051/ http://www.us-cert.gov/cas/techalerts/TA08-225A.html http://www.securitytracker.com/id?1020674	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2257`	vulnerable	2026-06-08 04:50:23.343779	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2256`	vulnerable	2026-06-08 04:50:23.343279	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2255`	vulnerable	2026-06-08 04:50:23.342741	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2254`	vulnerable	2026-06-08 04:50:23.341256	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4790`	vulnerable	2026-06-08 04:49:57.243516	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.