GCVE - cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Internet Explorer (`bbd5d868-ece4-553d-ad32-7763b4ff07af`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2382`	vulnerable	2026-06-08 04:58:05.782998	Details available Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue. Published: 2011-06-03T17:00:00.000Z Updated: 2024-09-17T02:41:25.100Z Open on db.gcve.eu Reference links http://www.informationweek.com/news/security/vulnerabilities/229700031 http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388 http://news.cnet.com/8301-1009_3-20066419-83.html http://www.eweek.com/c/a/Security/IE-Flaw-Lets-Attackers-Steal-Cookies-Access-User-Accounts-402503/ http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5071`	vulnerable	2026-06-08 04:56:31.877283	Details available The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. Published: 2011-12-07T19:00:00.000Z Updated: 2024-09-16T23:31:42.872Z Open on db.gcve.eu Reference links http://w2spconf.com/2010/papers/p26.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2954`	vulnerable	2026-06-08 04:51:31.506178	Details available Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715. Published: 2009-08-24T15:00:00.000Z Updated: 2024-08-07T06:07:37.328Z Open on db.gcve.eu Reference links http://websecurity.com.ua/3424/ http://www.securityfocus.com/archive/1/506006/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2576`	vulnerable	2026-06-08 04:51:29.234525	Details available Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected. Published: 2009-07-22T18:00:00.000Z Updated: 2024-08-07T05:59:55.640Z Open on db.gcve.eu Reference links http://websecurity.com.ua/3338/ http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html http://www.securityfocus.com/archive/1/505120/100/0/threaded http://www.securityfocus.com/archive/1/505092/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2069`	vulnerable	2026-06-08 04:51:26.587744	Details available Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request. Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.956Z Open on db.gcve.eu Reference links http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://www.securityfocus.com/bid/35411 http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2057`	vulnerable	2026-06-08 04:51:26.378084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0585`	vulnerable	2026-06-08 04:48:54.582799	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2435`	vulnerable	2026-06-08 04:47:19.949735	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0439`	vulnerable	2026-06-08 04:45:17.974283	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0028`	vulnerable	2026-06-08 04:44:58.364203	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0869`	vulnerable	2026-06-08 04:44:58.139030	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0827`	vulnerable	2026-06-08 04:44:58.127962	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.