NVD

Id
65835  
Name
CVE-2005-0054  
Description
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0054  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342885 65835 CVE-2005-0054 20050209 Internet Explorer zone spoofing with encoded URLs  View
342886 65835 CVE-2005-0054 oval:org.mitre.oval:def:1308  View
342887 65835 CVE-2005-0054 oval:org.mitre.oval:def:1736  View
342888 65835 CVE-2005-0054 oval:org.mitre.oval:def:3060  View
342889 65835 CVE-2005-0054 oval:org.mitre.oval:def:3196  View
342890 65835 CVE-2005-0054 oval:org.mitre.oval:def:3586  View
342891 65835 CVE-2005-0054 VU#580299  View
342892 65835 CVE-2005-0054 MS05-014  View
342893 65835 CVE-2005-0054 TA05-039A  View
342894 65835 CVE-2005-0054 ie-file-url-encode(19214)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61898 JVNDB-2005-000100 Microsoft Internet Explorer の URL のデコード処理における任意のコードを実行される脆弱性 Microsoft Internet Explorer には、特定のエンコードされた URL に対してデコード処理を複数回行ってしまう不備のため、セキュリティゾーンが適切に適用されない脆弱性が存在します。 CVE-2005-0054 11258 CVE-2005-0054 65835 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000100.html 2005-02-08 2007-04-01 View