CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft...

CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft...

CVE-2000-0156

Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability...

CVE-1999-0331

Buffer overflow in Internet Explorer 4.01...

CVE-1999-0347

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character...

CVE-1999-0488

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...

IE5.01 Frozes system on huge images

IE5.01 Frozes system on huge images 20.01.2000 Reproducability: Open http://www.security.nnov.ru/files/ie5hang.asp to test vulnerability save you data before : I can reproduce this bug on all PCs with Windows NT 4.0 SP5-6a + IE5, but reaction is different. Reaction can probably depend on type of...

javascript.hotmail.txt

Georgi Guninski security advisory 3, 2000 Yet another Hotmail security hole - injecting JavaScript in IE using "@import urljavascript:..." Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact...

CVE-1999-0981

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."...

CVE-1999-0858

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery WPAD server...

CVE-1999-0702

Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability...

CVE-1999-0802

Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon...

ie.frameloop.txt

Microsoft Internet Explorer 4.x 5.x - Frame Loop Vulnerability PROBLEM: It is possible to create a malicious webpage that when visited by an IE user all of their system resources are devoured and depending on the system its possible that the machine can even crash and reboot itself. The reason yo...

CVE-1999-0981

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."...

Microsoft Internet Explorer 5 - vnd.ms.radio URL

Microsoft Internet Explorer 5 - vnd.ms.radio URL Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 vnd.ms.radio URL Vulnerability source: https://www.securityfocus.com/bid/861/info Internet Explorer can handle URLs of type vnd.ms.radio: for streaming audio content. If a URL with 360 or...

CVE-1999-0793

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet...

ie.50.redirection.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect

Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: https://www.securityfocus.com/bid/766/info...

Microsoft Internet Explorer 4/5 / Outlook 98 - 'window.open' Redirect

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: https://www.securityfocus.com/bid/766/info If window.open is called with a target URL that redirects to a...

IE5_IFRAME_vuln.txt

IE 5.0 security vulnerability - reading local and from any domain, probably window spoofing is possible files using IFRAME and document.execCommand Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially...