CVE-2006-3897

Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service application crash by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property...

CVE-2006-3657

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service stack overflow exception via a DXImageTransform.Microsoft.Gradient ActiveX object with a long 1 StartColorStr or 2 EndColorStr property...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2006-3657

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service stack overflow exception via a DXImageTransform.Microsoft.Gradient ActiveX object with a long 1 StartColorStr or 2 EndColorStr property...

CVE-2006-3659: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by setting the location or URL property of a MHTMLFile ActiveX object...

CVE-2006-3658: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by accessing the object references of a FolderItem ActiveX object, which triggers a null dereference in the security check...

CVE-2006-3605

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference...

CVE-2006-3512

Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service crash by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference...

CVE-2006-3512

CVE-2006-3512 affects Internet Explorer 6 on Windows XP. The vulnerability arises when the Enabled property of a DXTFilter ActiveX object is set to true, leading to a null dereference and a remote denial of service. The issue is documented in multiple sources (e.g., NVD) with a CVSS base score of...

CVE-2006-3512: Undefined Security Weakness

Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service crash by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference...

CVE-2006-3427

CVE-2006-3427 affects Microsoft Internet Explorer 6. The issue arises when declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, causing a null dereference and a denial of service (crash). Documents do not provide patch/version details or ...

CVE-2006-3354

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

CVE-2006-3014 affects Microsoft Excel where embedding a Shockwave Flash Player ActiveX Object inside an XLS can automatically execute, enabling user-assisted arbitrary JavaScript execution and redirection when the spreadsheet is opened. According to SUSE and CPAI advisories, the issue originates ...

CVE-2006-3014: Improper Input Validation

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

The use of xml+xsl to the client to add the super admin account!- Vulnerability warning-the black bar safety net

Usage: put swords. xml and swords. xsl is placed in an ordinary space, I believe very few people will pay attention to the xml security bar, quack, as long as you want to run the program added to run , the default support for js and vbs. This app was a user of swords, the password for the est of...

CVE-2005-2844

Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object...

CVE-2005-2844

The CVE-2005-2844 issue affects Indiatimes Messenger 6.0: a buffer overflow in MMClient.exe’s RenameGroup function via a long group name argument of the MMClient.MunduMessenger.1 ActiveX object can cause denial of service and may allow arbitrary code execution. Documents confirm the vulnerable co...

CVE-2004-1908: Undefined Security Weakness

McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters...