CVE-1999-0488

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...

MS IE 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow

No description provided by source. Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: http://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's...

CVE-1999-1472

This CVE (CVE-1999-1472) affects Internet Explorer 4.0. The vulnerability allows a remote attacker to read arbitrary text and HTML files on the user’s machine by delivering a small IFRAME that uses Dynamic HTML (DHTML) to exfiltrate data (the Freiburg text-viewing issue). The connected records co...

CVE-1999-1472

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML DHTML to send the data to the attacker, aka the Freiburg text-viewing issue...

CVE-1999-1473: Undefined Security Weakness

When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."...

CVE-1999-1472: Undefined Security Weakness

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML DHTML to send the data to the attacker, aka the Freiburg text-viewing issue...

CVE-1999-1447

CVE-1999-1447 affects Internet Explorer 4.0. The vulnerability allows remote attackers to cause a crash (denial of service) through HTML code containing a long CLASSID parameter inside an OBJECT tag. The available sources do not specify a remediation or patch details within the provided documents...

CVE-1999-1447: Undefined Security Weakness

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...

CVE-2001-0322: Undefined Security Weakness

MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service application crash via a script that creates and deletes an object that is associated with the browser window object...

CVE-2000-0439: Undefined Security Weakness

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability...

CVE-1999-0488: Undefined Security Weakness

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...

CVE-1999-0331: Undefined Security Weakness

Buffer overflow in Internet Explorer 4.01...

CVE-1999-0876

CVE-1999-0876 affecting Microsoft Internet Explorer 4.0, where a buffer overflow is triggered via an EMBED tag. The connected Red Hat and NVD entries reiterate this description. The documented impact indicates complete confidentiality, integrity, and availability compromises with a base score of ...

CVE-1999-0871

The vulnerability CVE-1999-0871 affects Internet Explorer 4.0 and 4.01, described as the "Cross Frame Navigate" issue where a remote attacker can read files due to IE’s cross-frame security. The provided documents identify the affected product and the basic impact (read access to files) but do no...

CVE-1999-0876: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Internet Explorer 4.0 via EMBED tag...

CVE-1999-0871: Undefined Security Weakness

Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability...