Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context…
Priority LOW 32CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Why it matters now
EPSS 0.03027 87th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 94
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:* | 5.0 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:* | 5.0 sp4 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:* | 5.22 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:* | 6.0 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:* | 6.0 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:* Versions 5.0 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:* Versions 5.0 sp4 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:* Versions 5.22 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:* Versions 6.0 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:* Versions 6.0 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Microsoft
Show 84 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:* | 4.0.1 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:* | 4.0.1 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:* | 4.01 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:* | 4.01 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:* | 4.40.308 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:* | 4.40.520 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:* | 4.70.1155 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:* | 4.70.1158 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:* | 4.70.1215 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:* | 4.70.1300 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:* | 4.71.544 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:* | 4.71.1008.3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:* | 4.71.1712.6 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:* | 4.72.2106.8 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:* | 4.72.3110.8 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:* | 4.72.3612.1713 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:* | 5 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:* | 5.0.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:* | 5.0.1 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:* | 5.0.1 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:* | 5.0.1 sp3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:* | 5.0.1 sp4 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:* | 5.00.0518.10 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:* | 5.00.0910.1309 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:* | 5.00.2014.0216 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:* | 5.00.2314.1003 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:* | 5.00.2614.3500 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:* | 5.00.2919.800 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:* | 5.00.2919.3800 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:* | 5.00.2919.6307 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:* | 5.00.2920.0000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:* | 5.00.3103.1000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:* | 5.00.3105.0106 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:* | 5.00.3314.2101 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:* | 5.00.3315.1000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:* | 5.00.3502.1000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:* | 5.00.3700.1000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:* | 5.01 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:* | 5.01 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:* | 5.01 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:* | 5.01 sp3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:* | 5.01 sp4 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:* | 5.2.3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:* | 5.5 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:* | 5.5 preview | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:* | 5.5 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:* | 5.5 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:* | 5.50.3825.1300 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:* | 5.50.4030.2400 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:* | 5.50.4134.0600 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:* | 5.50.4308.2900 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:* | 5.50.4522.1800 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:* | 5.50.4807.2300 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* | 6 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:* | 6 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:* | 6.00.2462.0000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:* | 6.00.2479.0006 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:* | 6.0.2600 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:* | 6.0.2800 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:* | 6.0.2800.1106 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:* | 6.00.2800.1106 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:* | 6.0.2900 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:* | 6.0.2900.2180 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:* | 6.00.2900.2180 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:* | 6.00.3663.0000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:* | 6.00.3790.0000 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:* | 6.00.3790.1830 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:* | 6.00.3790.3959 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* | 7 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:* | 7.0 beta | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:* | 7.0 beta1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:* | 7.0 beta3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:* | 7.0.5730.11 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:* | 7.00.5730.1100 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:* | 7.00.6000.16386 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:* | 7.00.6000.16441 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:* Versions 4.0.1 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:* Versions 4.0.1 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:* Versions 4.01 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:* Versions 4.01 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:* Versions 4.40.308 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:* Versions 4.40.520 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:* Versions 4.70.1155 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:* Versions 4.70.1158 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:* Versions 4.70.1215 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:* Versions 4.70.1300 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:* Versions 4.71.544 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:* Versions 4.71.1008.3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:* Versions 4.71.1712.6 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:* Versions 4.72.2106.8 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:* Versions 4.72.3110.8 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:* Versions 4.72.3612.1713 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:* Versions 5 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:* Versions 5.0.1 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:* Versions 5.0.1 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:* Versions 5.0.1 sp3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:* Versions 5.0.1 sp4 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:* Versions 5.00.0518.10 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:* Versions 5.00.0910.1309 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:* Versions 5.00.2014.0216 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:* Versions 5.00.2314.1003 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:* Versions 5.00.2614.3500 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:* Versions 5.00.2919.800 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:* Versions 5.00.2919.3800 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:* Versions 5.00.2919.6307 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:* Versions 5.00.2920.0000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:* Versions 5.00.3103.1000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:* Versions 5.00.3105.0106 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:* Versions 5.00.3314.2101 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:* Versions 5.00.3315.1000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:* Versions 5.00.3502.1000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:* Versions 5.00.3700.1000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:* Versions 5.01 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:* Versions 5.01 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:* Versions 5.01 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:* Versions 5.01 sp3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:* Versions 5.01 sp4 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:* Versions 5.2.3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:* Versions 5.5 preview Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:* Versions 5.5 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:* Versions 5.5 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:* Versions 5.50.3825.1300 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:* Versions 5.50.4030.2400 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:* Versions 5.50.4134.0600 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:* Versions 5.50.4308.2900 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:* Versions 5.50.4522.1800 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:* Versions 5.50.4807.2300 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* Versions 6 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:* Versions 6 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:* Versions 6.00.2462.0000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:* Versions 6.00.2479.0006 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:* Versions 6.0.2600 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:* Versions 6.0.2800 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:* Versions 6.0.2800.1106 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:* Versions 6.00.2800.1106 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:* Versions 6.0.2900 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:* Versions 6.0.2900.2180 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:* Versions 6.00.2900.2180 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:* Versions 6.00.3663.0000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:* Versions 6.00.3790.0000 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:* Versions 6.00.3790.1830 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:* Versions 6.00.3790.3959 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* Versions 7 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:* Versions 7.0 beta Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:* Versions 7.0 beta1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:* Versions 7.0 beta3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:* Versions 7.0.5730.11 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:* Versions 7.00.5730.1100 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:* Versions 7.00.6000.16386 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:* Versions 7.00.6000.16441 Vulnerable ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2009-2057
- 2026-10-03 Alias added: GHSA-875j-h634-3xpp
References
More Microsoft Ie vulnerabilities
- TI-2004-00947 Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute… CVSS 2.0HIGH 10.0
- TI-2004-00183 Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet… CVSS 2.0HIGH 10.0
- TI-2007-00210 The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow… CVSS 2.0HIGH 10.0
- TI-2006-01313 Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of… CVSS 2.0HIGH 9.3
- TI-2006-01146 Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 10.0
- TI-2006-03617 Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote… CVSS 3.1HIGH 8.8
Sources
- CVE-2009-2057 · CVE Program
- CVE-2009-2057 · NVD
- FIRST EPSS
- GHSA-875j-h634-3xpp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences