CVE

Id
14446  
CVE No.
CVE-2005-3240  
Status
Candidate  
Description
Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.  
Phase
Assigned (20051017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
108561 14446 CVE-2005-3240 BUGTRAQ:20060213 Internet Explorer drag&drop 0day  View
108562 14446 CVE-2005-3240 URL:http://www.securityfocus.com/archive/1/424863/100/0/threaded  View
108563 14446 CVE-2005-3240 BUGTRAQ:20060214 Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd)  View
108564 14446 CVE-2005-3240 URL:http://www.securityfocus.com/archive/1/archive/1/424940/100/0/threaded  View
108565 14446 CVE-2005-3240 VULNWATCH:20060213 Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd)  View
108566 14446 CVE-2005-3240 MISC:http://www.securiteam.com/windowsntfocus/5MP0B0UHPA.html  View
108567 14446 CVE-2005-3240 MISC:http://blogs.technet.com/msrc/archive/2006/02/13/419439.aspx  View
108568 14446 CVE-2005-3240 BID:16352  View
108569 14446 CVE-2005-3240 URL:http://www.securityfocus.com/bid/16352  View
108570 14446 CVE-2005-3240 VUPEN:ADV-2006-0553  View
108571 14446 CVE-2005-3240 URL:http://www.vupen.com/english/advisories/2006/0553  View
108572 14446 CVE-2005-3240 OSVDB:2707  View
108573 14446 CVE-2005-3240 URL:http://www.osvdb.org/2707  View
108574 14446 CVE-2005-3240 SECTRACK:1015049  View
108575 14446 CVE-2005-3240 URL:http://securitytracker.com/id?1015049  View
108576 14446 CVE-2005-3240 SECUNIA:18787  View
108577 14446 CVE-2005-3240 URL:http://secunia.com/advisories/18787  View
108578 14446 CVE-2005-3240 XF:ie-dragdrop-variant(24648)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62435 JVNDB-2005-000637 Ethereal の SMB および IrDA 解析部におけるシステムクラッシュが発生する脆弱性 ------------ CVE-2005-3242 14446 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000637.html  View