GCVE-110-CERTCC-2005-698835

Advisory Published

Vulnetix · Advisory published February 8, 2005

Microsoft DHTML Drag-and-Drop events can manipulate windows to copy objects from one domain to another, including the Local Machine Zone. This vulnerability could allow an attacker to write arbitrary files to the local file system.

Download JSON Open in Console

Risk Scores

certcc-cam

impact10population20exploitation0widely_known20score_current28.125ease_of_exploitation15

Aliases

CVE-2005-0053

References

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Microsoft DHTML Drag-and-Drop events insufficiently validated

advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON