198 matches found
CVE-2003-1048
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service application crash via a malformed GIF image...
CVE-2003-1048
CVE-2003-1048 describes a double-free vulnerability in Internet Explorer’s GIF handling via mshtml.dll. The flaw affects IE6 and related builds where processing GIFs could allow a remote attacker to crash the application or, in some scenarios, execute arbitrary code. Public advisories (MS04-025) ...
CVE-2003-1048
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service application crash via a malformed GIF image...
PT-2004-1224 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Internet Explorer 6.x versions affected versions not specified Description: The issue is related to a double free vulnerability in the mshtml.dll component. This vulnerability allows remote attackers to cause a denial of service, resulting in...
CVE-2004-0484
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service crash via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a nul...
CVE-2004-0484
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service crash via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a nul...
CVE-2004-0484
The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...
CVE-2002-0022
CVE-2002-0022 describes a buffer overflow in the mshtml.dll HTML rendering engine (Internet Explorer 5.5/6.0) triggered by crafted HTML with embedded ActiveX controls, allowing remote code execution. The exploitation targets the SRC/EMBED handling and concatenation of two Unicode strings, enablin...
Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general)
Dear, Advisory was originally posted in 1-3 2 weeks ago, so I think it's enough time passed to publish some details, because 4,5 have enough information to re-discover vulnerability. ERRor erroratpochtamt.ru discovered IE 5.5 and 6.0 in some cases crash on embed src="filename.AAAAAAAAAAlot of 'A'...
dH & SECURITY.NNOV: buffer overflow in mshtml.dll
Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...
buffer overflow in mshtml.dll
Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...
CVE-2001-0322
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service application crash via a script that creates and deletes an object that is associated with the browser window object...
CVE-2001-0322
CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...
CVE-2001-0322
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service application crash via a script that creates and deletes an object that is associated with the browser window object...
Stack Overflow in MSHTML.DLL
Stack Overflow in MSHTML.DLL Systems affected: Any program using MSHTML.DLL for HTML parsing Internet Explorer, Outlook/Outlook Express and other HTML-enabled emailreaders. Reliably tested on IE4.0 and higher on any Windows system, with any servicepacks and patches. Older versions of MSHTML.DLL m...
CVE-1999-0489
CVE-1999-0489 affects MSHTML.DLL in Internet Explorer 5.0. It allows a remote attacker to paste a file name into the file upload intrinsic control (variant of “untrusted scripted paste” per MS:MS98-013).
CVE-1999-0490
MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...