CVE-2005-2829
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted...
CVE-2005-2829 is a medium vulnerability (CVSS 5.1) in Microsoft Internet Explorer, published December 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.6%, the 97th percentile. No source names a fixed version.
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
5.1
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
CVE-2005-2829- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
CVE-2005-2829- Updated
- 2026-11-02
EUVDEUVD-2005-2830 No score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
EUVD-2005-2830- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prm3-f265-2p7w No score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted...
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
GHSA-prm3-f265-2p7w- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
secunia.com/advisories/18064
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1340
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1458
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1209
securityfocus.com/bid/15823
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054
Show 18 moreShow less
securityfocus.com/archive/1/419395/100/0/threaded
support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
secunia.com/advisories/15368
vupen.com/english/advisories/2005/2909
secunia.com/secunia_research/2005-7/advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1507
securitytracker.com/id?1015349
secunia.com/advisories/18311
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1490
vupen.com/english/advisories/2005/2867
exchange.xforce.ibmcloud.com/vulnerabilities/23448
marc.info?l=full-disclosure&m=113450519906463&w=2
secunia.com/secunia_research/2005-21/advisory
www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1505
securityreason.com/securityalert/254
nvd.nist.gov/vuln/detail/CVE-2005-2829
github.com/advisories/GHSA-prm3-f265-2p7w