CVE-2005-0110: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 6.8% chance of exploitation in the next 30 days.

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.

Affected products

• Microsoft Ie: version 6.0 only

Published 2005-01-14. Last modified 2026-06-16.