CVE-2005-3240

no score yetEPSS 5.5%

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:ie
microsoft:internet_explorer

References

http://blogs.technet.com/msrc/archive/2006/02/13/419439.aspx
http://secunia.com/advisories/18787
http://securitytracker.com/id?1015049
http://www.osvdb.org/2707
http://www.securiteam.com/windowsntfocus/5MP0B0UHPA.html

Check your stack JSON