CVE-2005-2829 Other in n/a
User-assisted attackers can execute arbitrary code in Internet Explorer by manipulating the file download dialog box via window overlay and keyboard shortcuts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2005-2829?
CVE-2005-2829 is a medium-severity vulnerability in Microsoft Ie, published on 14 Dec 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
Which versions are affected by CVE-2005-2829?
It affects 2 products.
Products include Microsoft Ie, Microsoft Internet Explorer.
How do I fix CVE-2005-2829?
No fix has been published for CVE-2005-2829 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2829 being exploited?
There is no known exploitation of CVE-2005-2829 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Ie
Sources
Also known as GHSA-prm3-f265-2p7w.