1587 matches found
Win 2000 & IE 'shell://' problem?
I found that IE 5 running Win 2000 accepts "shell://" as a legal protocol, and when any URL ie "shell://localhost" or just "shell://" is loaded IE crashes and brings explorer.exe down with it. I think this would cause a user who didnt know much to think that Win 2000 had crashed of course killing...
CVE-2000-0162
Technical details (affected product/version, exploitability, and mitigations) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm impact and remediation guidance.
CVE-1999-0488
CVE-1999-0488 affects Internet Explorer 4.0 and 5.0. The vulnerability is a variant of the “cross frame” issue that allows a remote attacker to execute security scripts in a different security context via malicious URLs. The description indicates this is a remote code execution-style weakness thr...
CVE-1999-0967
CVE-1999-0967 describes a buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. The connected PT-1997-1176 entry reiterates a buffer overflow in the HTML library with affected software and recommends updating to ...
CVE-1999-0870
CVE-1999-0870 affects Internet Explorer 4.01. The issue allows remote attackers to read arbitrary files by pasting a file name into the file upload control (untrusted scripted paste). The underlying cause is improper handling of the file upload control, enabling unauthorized read access. The obse...
CVE-1999-0702
CVE-1999-0702 : Internet Explorer 5.0/5.01 is affected by the Import/Export Favorites vulnerability (ImportExportFavorites). A remote attacker may modify or execute files via this feature. The documentation explicitly links the issue to the Microsoft patch MS99-037 as a remediation. The impact is...
