6394 matches found
CVE-2004-1050
A heap-based buffer overflow exists in Internet Explorer 6 when parsing certain parameters of an IFRAME tag, specifically the NAME attribute. This vulnerability allows remote attackers to execute arbitrary code or create a denial of service condition in the context of the currently logged-in user...
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long 1 SRC or 2 NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."...
Multiple web browsers do not properly interpret BASE and FORM elements when displaying URLs in the status bar
Overview Multiple web browsers do not properly display the location of HTML documents in the status bar. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the status bar wh...
Multiple web browsers do not properly interpret TABLE elements when displaying URLs in the status bar
Overview Multiple web browsers do not properly display the location of HTML documents in the status bar. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the status bar wh...
CVE-2003-0718: Undefined Security Weakness
The WebDAV Message Handler for Internet Information Services IIS 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service memory and CPU exhaustion, application crash via a PROPFIND request with an XML message containing XML elements with a large number of attributes...
CVE-2004-0842: Undefined Security Weakness
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service application crash from "memory corruption" via certain malformed Cascading Style Sheet CSS elements that trigger heap-based buffer overflows, as demonstrated using the "...
IBM Lotus Domino ?ReadDesign Request Design Element Disclosure
The remote web server allows an attacker to view an XML list of design elements by sending a specially crafted HTTP request to the remote Lotus Domino server: http://target/names.nsf/view?ReadDesign Copyright C 2000 - 2004 Net-Square Solutions Pvt Ltd. By: Hemil Shah Desc: This script will check...
mozilla -- automated file upload
A malicious web page can cause an automated file upload from the victim's machine when viewed with Mozilla with Javascript enabled. This is due to a bug permitting default values for type="file" elements in certain situations...
CHM files execution in Internet Explorer
CHM file HTML-help may contain unsafe ActiveX elements and could lead to code execution. CHM execution may be triggered by calling CHM file as a HTML or via ActiveX elements...
Microsoft Internet Explorer code execution
If page contains large number of elements like FRAME SRC="C:winntregedit.exe"/FRAME application will be executed without user's intervation...
CVE-2003-0206: Undefined Security Weakness
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service crash via 1 link or 2 title elements that contain multiple lines...
Crossite scripting in Microsoft Internet Explorer
It's possible to get full access to OBJECT's elements...
