Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*

part: a version: 4.70.1158 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Explorer (bbd5d868-ece4-553d-ad32-7763b4ff07af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2382 vulnerable 2026-06-08 04:58:05.790999 Details available
Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-09-17T02:41:25.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5071 vulnerable 2026-06-08 04:56:31.884067 Details available
The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Published: 2011-12-07T19:00:00.000Z
Updated: 2024-09-16T23:31:42.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2954 vulnerable 2026-06-08 04:51:31.506382 Details available
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Published: 2009-08-24T15:00:00.000Z
Updated: 2024-08-07T06:07:37.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2576 vulnerable 2026-06-08 04:51:29.234736 Details available
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
Published: 2009-07-22T18:00:00.000Z
Updated: 2024-08-07T05:59:55.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2069 vulnerable 2026-06-08 04:51:26.587940 Details available
Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
Published: 2009-06-15T19:00:00.000Z
Updated: 2024-08-07T05:36:20.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2057 vulnerable 2026-06-08 04:51:26.384324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0585 vulnerable 2026-06-08 04:48:54.588595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2435 vulnerable 2026-06-08 04:47:19.955584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.