CVE-2005-2308: microsoft ie

EPSS trend

Probability

17.42%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 17.42% on 19-09-2026

19-09-202619-10-2026

EPSS score

17.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (lcamtuf.coredump.cx)
Maturity: unknown

Show all 6 exploits

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service
Maturity: poc

References

5 links

www.securityfocus.com/bid/14285VDB EntryX Refsource BIDExploit
www.securityfocus.com/bid/14286VDB EntryX Refsource BIDExploit
lcamtuf.coredump.cx/crashX Refsource MISCExploit
www.securityfocus.com/bid/14284VDB EntryX Refsource BIDExploit
www.securityfocus.com/archive/1/405298Mailing ListX Refsource BUGTRAQExploit

Related vulnerabilities

CVE-2003-1559microsoftie+115.80%18y ago14-07-2008 23:00Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.CVE-2003-0701microsoftie+130.07%23y ago22-08-2003 04:00Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344.CVE-2003-0344microsoftie+181.31%23y ago06-06-2003 04:00Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.CVE-2001-1497microsoftie+12.05%21y ago21-06-2005 04:00Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack.CVE-2001-0665microsoftie12.09%24y ago09-03-2002 05:00Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."CVE-2005-2087microsoftie+161.37%21y ago30-06-2005 04:00Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem.

All vulnerabilities inie

CVE-2005-2308: microsoft ie

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References