Code injection

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is sti...

CVE-2006-1626: Improper Input Validation

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is sti...

CVE-2006-1359: Improper Control of Generation of Code

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer...

Microsoft Internet Explorer 6 - mshtml.dll checkbox Crash

Microsoft Internet Explorer 6 - mshtml.dll checkbox Crash r=document.getElementById"c"; a=r.createTextRange; milw0rm.com 2006-03-22...

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

Microsoft Internet Explorer 6 - Script Action Handlers 'mshtml.dll' Denial of Service

foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

CVE-2006-0753

CVE-2006-0753 is a memory leak/DoS issue in Microsoft Internet Explorer 6 on Windows XP SP2 caused by JavaScript using setInterval to repeatedly set window.status, leading to stack exhaustion in the Script Engine. Connected advisory CPAI-2006-160 confirms a stack-exhaustion path and DoS outcome. ...

CVE-2006-0753: Undefined Security Weakness

Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service memory consumption via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status...

CVE-2005-4679

This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...

EUVD-2005-4673

Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

CVE-2005-4679: Undefined Security Weakness

Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

Microsoft Internet Explorer 6 - mshtml.dll div Denial of Service

Microsoft Internet Explorer 6 - mshtml.dll div Denial of Service Denial of Service exploit by rgod site: http://rgod.altervista.org mail: retrogod at aliceposta it original poc: http://rgod.altervista.org/ie6sp2crash.html...

MS Internet Explorer 6.0 (pre tag multiple single tags) Denial of Service

Exploit for unknown platform in category dos / poc ========================================================================= MS Internet Explorer 6.0 pre tag multiple single tags Denial of Service ========================================================================= Lets IE crash pre...

CVE-2005-2126: Undefined Security Weakness

The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted...

Microsoft Security Bulletin MS05-044 Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495)

Microsoft Security Bulletin MS05-044 Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering 905495 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Tampering Maximum Severity...

[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability

MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability Release Date: October 11, 2005 Date Reported: September 15, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Internet Explorer 5 SP4 Internet Explorer 5.5 SP2 - Windows ME Internet Explorer 6 SP1 - All Windows...

CVE-2005-2127: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally...

CVE-2004-2219: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake...

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx...

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx sec-consult - http://www.sec-consult.com/184.html Solution : Set Internet and...