CVE-2005-0053: Microsoft Ie

High severity, CVSS 7.5. EPSS: 59.8% chance of exploitation in the next 30 days.

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only
• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version enterprise only; version enterprise_64-bit only; version r2 only; version standard only; version web only
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows XP: any version

Published 2005-05-02. Last modified 2026-06-16.