CVE-2005-1989

Internet Explorer <6.0 - Info Disclosure

Title source: llm

Description

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".

Exploits (1)

exploitdb WORKING POC

htmlremotewindows

https://www.exploit-db.com/exploits/1144

View Code ZIP pw:eip

References (10)

[Patch, Vendor Advisory] http://secunia.com/advisories/16373/

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/14512

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100081

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1319

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A697

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A790

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A888

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/1353

Scores

EPSS 0.6278

EPSS Percentile 98.4%

Details

Status published

Products (3)

microsoft/ie 6 windows_server_2003_sp1

microsoft/internet_explorer 5.01

microsoft/internet_explorer 5.5

Published Aug 10, 2005

Tracked Since Feb 18, 2026