CVE-2005-3240: Microsoft Ie

Medium severity, CVSS 5.1. EPSS: 5.5% chance of exploitation in the next 30 days.

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.01 only; version 5.5 only; version 6.0 only

Published 2005-12-31. Last modified 2026-06-16.