NVD

Id
65837  
Name
CVE-2005-0056  
Description
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342905 65837 CVE-2005-0056 oval:org.mitre.oval:def:2385  View
342906 65837 CVE-2005-0056 oval:org.mitre.oval:def:2817  View
342907 65837 CVE-2005-0056 oval:org.mitre.oval:def:3318  View
342908 65837 CVE-2005-0056 oval:org.mitre.oval:def:4085  View
342909 65837 CVE-2005-0056 oval:org.mitre.oval:def:4947  View
342910 65837 CVE-2005-0056 1013126  View
342911 65837 CVE-2005-0056 VU#823971  View
342912 65837 CVE-2005-0056 MS05-014  View
342913 65837 CVE-2005-0056 12427  View
342914 65837 CVE-2005-0056 TA05-039A  View
342915 65837 CVE-2005-0056 ie-cdf-execute-code(19137)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61900 JVNDB-2005-000102 Microsoft Internet Explorer の CDF ファイルの処理におけるセキュリティ制限を回避される脆弱性 Microsoft Internet Explorer には、チャンネル定義形式 (CDF) ファイル内の URL の妥当性が適切にチェックされないため、クロスドメインセキュリティモデルが回避される脆弱性が存在します。 CVE-2005-0056 11260 CVE-2005-0056 65837 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000102.html 2005-02-08 2007-04-01 View