265 matches found
CVE-1999-1447: Undefined Security Weakness
Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...
CVE-2000-0765: Undefined Security Weakness
Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability...
Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution
source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...
msie4-object.txt
Date: Tue, 28 Jul 1998 10:10:36 PDT From: Georgi Guninski Subject: Object tag crashes Internet Explorer 4.0 The tag seems to crash Internet Explorer 4.0 under Win95 don't know about other versions/OS. The following: opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0, or a blue...