Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*

part: a version: 5.00.2919.3800 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Explorer (bbd5d868-ece4-553d-ad32-7763b4ff07af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2382 vulnerable 2026-06-08 04:58:05.810520 Details available
Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue.
Published: 2011-06-03T17:00:00.000Z
Updated: 2024-09-17T02:41:25.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5071 vulnerable 2026-06-08 04:56:31.898418 Details available
The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Published: 2011-12-07T19:00:00.000Z
Updated: 2024-09-16T23:31:42.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2954 vulnerable 2026-06-08 04:51:31.506844 Details available
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Published: 2009-08-24T15:00:00.000Z
Updated: 2024-08-07T06:07:37.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2069 vulnerable 2026-06-08 04:51:26.588320 Details available
Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.
Published: 2009-06-15T19:00:00.000Z
Updated: 2024-08-07T05:36:20.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2057 vulnerable 2026-06-08 04:51:26.396754 Details available
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Published: 2009-06-15T19:00:00.000Z
Updated: 2024-09-17T01:11:07.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3893 vulnerable 2026-06-08 04:49:55.289168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3892 vulnerable 2026-06-08 04:49:55.277069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0585 vulnerable 2026-06-08 04:48:54.600087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2435 vulnerable 2026-06-08 04:47:19.967496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.