Vulnerability in Microsoft Ie
CVE-2005-0110
Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.
EPSS: 0.068 (93.3th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)