Microsoft Internet Explorer 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Internet Explorer (bbd5d868-ece4-553d-ad32-7763b4ff07af) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-2383 |
vulnerable | 2026-06-08 04:58:05.848752 |
Details available
Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-08-06T23:00:33.783Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2382 |
vulnerable | 2026-06-08 04:58:05.779392 |
Details available
Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-09-17T02:41:25.100Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2379 |
not_vulnerable | 2026-06-08 04:58:05.739659 |
Details available
Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
Published: 2011-08-09T19:00:00.000Z
Updated: 2024-08-06T23:00:33.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1765 |
not_vulnerable | 2026-06-08 04:58:02.006372 |
Details available
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.
Published: 2011-05-23T22:00:00.000Z
Updated: 2024-08-06T22:37:25.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1587 |
not_vulnerable | 2026-06-08 04:58:00.804120 |
Details available
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? (question mark) in a query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.933Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1578 |
not_vulnerable | 2026-06-08 04:58:00.700251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5071 |
vulnerable | 2026-06-08 04:56:31.874619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2954 |
vulnerable | 2026-06-08 04:51:31.506099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2576 |
vulnerable | 2026-06-08 04:51:29.234443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2069 |
vulnerable | 2026-06-08 04:51:26.587676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2057 |
vulnerable | 2026-06-08 04:51:26.375834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0585 |
vulnerable | 2026-06-08 04:48:54.580652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2435 |
vulnerable | 2026-06-08 04:47:19.947586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0439 |
vulnerable | 2026-06-08 04:45:17.973435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0028 |
vulnerable | 2026-06-08 04:44:58.364138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-1446 |
vulnerable | 2026-06-08 04:44:58.313289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0869 |
vulnerable | 2026-06-08 04:44:58.138972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0827 |
vulnerable | 2026-06-08 04:44:58.127910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0280 |
vulnerable | 2026-06-08 04:44:57.991535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0031 |
vulnerable | 2026-06-08 04:44:57.905606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.