CVE-2005-2829
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted...
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
CVE-2005-2829- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
CVE-2005-2829- Updated
- 2026-11-02
EUVDEUVD-2005-2830No score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
EUVD-2005-2830- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prm3-f265-2p7wNo score
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted...
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
- Record
GHSA-prm3-f265-2p7w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2829 is a medium vulnerability (CVSS 5.1) in Microsoft Internet Explorer, published December 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.6%, the 97th percentile. No source names a fixed version.
References
secunia.com/advisories/18064
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1340
securityfocus.com/bid/15823
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-054
Show 18 moreShow less
support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
vupen.com/english/advisories/2005/2909
securitytracker.com/id?1015349
exchange.xforce.ibmcloud.com/vulnerabilities/23448
marc.info?l=full-disclosure&m=113450519906463&w=2
www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
securityreason.com/securityalert/254
nvd.nist.gov/vuln/detail/CVE-2005-2829
github.com/advisories/GHSA-prm3-f265-2p7w