ISS Protection Bried: ie_patch_ms_06-13

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief April 11, 2006 Cumulative Security Update for Internet Explorer Summary: Microsoft has issued a cumulative security update for Internet Explorer. This update addresses a number of critical issues that could affect IE user...

Microsoft Internet Explorer may automatically execute HTA files

Overview Microsoft Internet Explorer IE fails to properly handle HTA files. This vulnerability may allow a remote attacker to execute arbitrary code. Description HTML Application HTA HTML Applications HTAs are HTML documents that are executed as trusted applications. HTAs can run script, Java, or...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

Code injection

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388

The HTA Execution Vulnerability (CVE-2006-1388) is an Internet Explorer 6 remote code execution flaw where an HTML Application (HTA) can be initiated in a way that bypasses the normal security dialog. A malicious Web page could trigger HTA execution and potentially take full control of an affecte...

MS Windows (HTA) Script Execution Exploit (MS05-016)

Exploit for unknown platform in category local exploits ==================================================== MS Windows HTA Script Execution Exploit MS05-016 ==================================================== / Changed date in db to place it on the main page instead of it being bumped off /str0...

Microsoft Windows - HTA Script Execution (MS05-016)

Microsoft Windows - HTA Script Execution MS05-016 / Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You nee...

Microsoft Windows - 'HTA' Script Execution (MS05-016)

/ Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You need make a .hta file to use it. Like: set...

CVE-2003-0838

CVE-2003-0838 concerns Internet Explorer where an attacker can bypass zone restrictions and cause arbitrary code execution by creating a popup window and inserting ActiveX object code with a data tag that IE may treat as HTML/Javascript but execute as an HTA application. The vulnerability is rela...

CVE-2003-0838

Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...

msie.5.0.hta.txt

Date: Tue, 8 Jun 1999 08:41:54 -0400 From: "Noller, Jesse" To: [email protected] Subject: IE 5.0 and HTAs Security hole Good day: I recently set up an NT box, with just the basic setup, no other modifications, other than SP5, and an installation of Internet Explorer 5.0. I was...