CVE-2005-0053 Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
HighCVSS 7.5
EPSS 59.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft ie | = 6.0-sp2 | No fix listed |
| Microsoft internet explorer | = 5.0.1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp2 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp3 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp4 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 5.5-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- VU#698835 patch third-party-advisory us-government-resource
- 11466 exploit patch vdb-entry
- TA05-039A patch third-party-advisory us-government-resource
- MS05-008 vendor-advisory
- MS05-014 vendor-advisory
- ie-dragdrop-gain-privileges(19117) vdb-entry
- oval:org.mitre.oval:def:1015 signature vdb-entry
- oval:org.mitre.oval:def:1334 signature vdb-entry
- oval:org.mitre.oval:def:2046 signature vdb-entry
- oval:org.mitre.oval:def:2953 signature vdb-entry
- oval:org.mitre.oval:def:3006 signature vdb-entry
- oval:org.mitre.oval:def:4726 signature vdb-entry
- oval:org.mitre.oval:def:4864 signature vdb-entry