Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting

source: https://www.securityfocus.com/bid/2633/info A vulnerability exists in the handling of XML stylesheets in Internet Explorer and Outlook Express. If active scripting is disabled in all security zones, IE and OE will still allow script to run if it is contained in the stylesheet of an XML...

Microsoft Internet Explorer 5.05.5 OE 5.5 - XML Stylesheets Active Scripting

Microsoft Internet Explorer 5.05.5 OE 5.5 - XML Stylesheets Active Scripting source: https://www.securityfocus.com/bid/2633/info A vulnerability exists in the handling of XML stylesheets in Internet Explorer and Outlook Express. If active scripting is disabled in all security zones, IE and OE wil...

Microsoft Outlook Express address book vulnerability

Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Affected : Outlook Exress 5.5SP1 and prior Risk : Low/Average Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes Vendor URL :...

A subject line buffer overflow in Outlook Express (was Re: EML Content Spoofing and Informed Consent)

----- Original Message ----- From: "Dan Kaminsky" [email protected] To: [email protected] Sent: Wednesday, April 04, 2001 5:52 PM Subject: EML Content Spoofing and Informed Consent was: Re: MS patch Q292108 opens a vulnerability snip The short version of this: If I try to open a MP3 file...

CVE-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

CVE-2001-0145

CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...

Security Bulletin MS01-012

---------------------------------------------------------------------- Title: Outlook, Outlook Express Vcard Handler Contains Unchecked Buffer Date: 22 February 2001 Software: Outlook, Outlook Express Impact: Run code of attacker's choice Bulletin: MS01-012 Microsoft encourages customers to...

CVE-2000-0764

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet...

CVE-2000-0764

CVE-2000-0764 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to cause a denial of service by sending a malformed IP packet, impacting availability (partial). No exploit vector or remediation details are provided in the supplied documents beyond the basic des...

CVE-2000-1238

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / forward slash characters before the restricted pages...

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

CVE-2000-0764

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet...

IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs

Georgi Guninski security advisory 24, 2000 IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs Systems affected: IE 5.5/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 18 October 2000 Legal Notice: This Advisory is Copyright c 20...

guninski24.txt

Georgi Guninski security advisory 24, 2000 IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs Systems affected: IE 5.5/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 18 October 2000 Legal Notice: This Advisory is Copyright c 20...

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...

CVE-2000-0882

CVE-2000-0882 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to trigger a Denial of Service by sending a malformed ICMP packet, causing the switch CPU to crash. The available sources (NVD/NIST CVE listing) confirm the affected product and impact as described...

CVE-2000-0621

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability...

CVE-2000-0451

CVE-2000-0451 concerns the Intel Express 8100 ISDN router, where remote attackers can cause a denial of service by sending oversized or fragmented ICMP packets. The available connected metadata confirms the affected device and the specific attack vector (ICMP amplification/fragmentation) that lea...

CVE-2000-0621

The CVE-2000-0621 issue affects Microsoft Outlook 98/2000 and Outlook Express 4.0x/5.0x. A malformed HTML message can cause files to be stored outside the local cache, placing them under the Local Computer Zone instead of the Internet Zone. This bypasses the intended security boundaries and can b...

IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files

Georgi Guninski security advisory 22, 2000 IE 5.5/Outlook Express security vulnerability - GetObject expose user's files Systems affected: IE 5.5, Outlook Express,probably Outlook - Win98/2000. Probably other versions - have not tested. Risk: High Date: 26 September 2000 Legal Notice: This Adviso...