5.1

CVE-2005-0056

Exploit

EPSS 32.54%
Published 02.05.2005 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 14

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Ie Version6 Updatewindows_server_2003_sp1

Microsoft ≫ Internet Explorer Version5.01

Microsoft ≫ Internet Explorer Version5.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	32.54%	0.965

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

http://www.us-cert.gov/cas/techalerts/TA05-039A.html

Patch

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014

https://exchange.xforce.ibmcloud.com/vulnerabilities/19137

http://securitytracker.com/id?1013126

http://www.kb.cert.org/vuls/id/823971

Patch

US Government Resource

http://www.securityfocus.com/bid/12427

Patch

Exploit

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3318

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4085

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4947

https://nvd.nist.gov/vuln/detail/CVE-2005-0056

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0056

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0056

EUVD