CVE-2005-0056
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition...
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
- Record
CVE-2005-0056- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
- Record
CVE-2005-0056- Updated
- 2026-11-02
EUVDEUVD-2005-0057 No score
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
- Record
EUVD-2005-0057- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gq77-wfp4-xgg9 No score
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition...
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
- Record
GHSA-gq77-wfp4-xgg9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0056 is a medium vulnerability (CVSS 5.1) in Microsoft Internet Explorer, published February 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 28.3%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014
us-cert.gov/cas/techalerts/TA05-039A.html
securityfocus.com/bid/12427
exchange.xforce.ibmcloud.com/vulnerabilities/19137
Show 7 moreShow less
securitytracker.com/id?1013126
kb.cert.org/vuls/id/823971
nvd.nist.gov/vuln/detail/CVE-2005-0056
github.com/advisories/GHSA-gq77-wfp4-xgg9