CVE-2003-1484: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service crash by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute...

CVE-2006-6310: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

CVE-2006-4777

Heap-based buffer overflow in the DirectAnimation Path Control DirectAnimation.PathControl COM object daxctle.ocx for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the...

CVE-2006-4777

A heap-based buffer overflow exists in the DirectAnimation Path Control (COM object daxctle.ocx ) used by Internet Explorer 6.0 SP1 . The vulnerability is caused by improper validation of user-supplied arguments to the KeyFrame method, potentially involving an integer overflow . A remote attacker...

CVE-2006-4777: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the DirectAnimation Path Control DirectAnimation.PathControl COM object daxctle.ocx for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the...

CVE-2006-4446: Undefined Security Weakness

Heap-based buffer overflow in DirectAnimation.PathControl COM object daxctle.ocx in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points...

CVE-2006-4301: Improper Input Validation

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service crash via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from a dxtmsft.dll and b dxtmsft3.dll, including 1 DXImageTransform.Microsoft.MaskFilter.1, 2...

CVE-2006-4219: Undefined Security Weakness

The Terminal Services COM object tsuserex.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN...

CVE-2006-4193: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including 1 imskdic.dll Microsoft IME, 2 chtskdic.dll Microsoft IME, and 3 msoe.dll Outlook,...

CVE-2006-0585: Undefined Security Weakness

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service application crash via a Shockwave Flash object that contains ActionScript code that calls VBScript, which in turn calls the Javascript document.write function, which triggers a null...

CVE-2005-4269

The affected component is mshtml.dll in Microsoft Windows XP, Windows Server 2003, and Internet Explorer 6.0 SP1. The issue arises when mshtml.dll processes button-focus events while a document is reloading, leading to a denial of service (access violation). This is observed in Microsoft Office I...

CVE-2005-4269

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service access violation by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly...

CVE-2005-4269: Undefined Security Weakness

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service access violation by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly...

CVE-2004-2434: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service browser crash via a link with "::" colon colon left brace, which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an...

CVE-2004-1527: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers ...