4365 matches found
Microsoft Internet Explorer 7.0 - Header Handling 'res://' Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28667/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain potentially sensitive information from the local computer. Information obtained may...
Microsoft Internet Explorer 5.0.1 Script Action Handler Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17131/info Microsoft Internet Explorer is susceptible to a remote buffer-overflow vulnerability in 'MSHTML.DLL'. The application fails to properly bounds-check user-supplied input data before copying it into an...
Microsoft Internet Explorer 5.0.1/6.0 Structured Graphics Control Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18855/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to handle ActiveX controls properly. This issue is triggered when an attacker convinces a victim user to activate a...
Microsoft Internet Explorer 5 Shell: IFrame Cross-Zone Scripting Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to ho...
Microsoft Internet Explorer CButton Object Use-After-Free Vulnerability
No description provided by source. //rop 68byte var rop = unescape "%u34b4%u51bf" + // 0x51bf34b4, POP ESI RETN hxds.dll "%u10b8%u51bd" + // 0x51bd10b8, ptr to &VirtualProtect IAT hxds.dll "%u2d97%u51bd" + // 0x51bd2d97, MOV EAX,DWORD PTR DS:ESI RETN hxds.dll "%ucba0%u51bd" + // 0x51bdcba0, XCHG...
Microsoft Internet Explorer 6.0/7.0 RemoveChild Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20812/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code. Successfully exploiting this issue will cause the...
MS IE 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow
No description provided by source. Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: http://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's...
MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution
No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...
Microsoft Internet Explorer 6.0 Position:Relative Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25222/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle certain HTML code. This issue is triggered when a remote attacker entices a victim user to visit...
Microsoft Internet Explorer 5 Dialog Same Origin Policy Bypass Variant Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5561/info Microsoft Internet Explorer includes support for dialog windows through script calls to the two functions showModalDialog and showModelessDialog. These functions accept a URL location for the dialog content, and...
Microsoft Internet Explorer 5.0.1 JPEG Image Rendering CMP Fencepost Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282...
Microsoft Internet Explorer 6.0 Object.Microsoft.DXTFilter Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18903/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
CommuniGate Pro 5.1.8 Web Mail HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23950/info CommuniGate Pro is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to execute HTML and script code in the...
MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Internet Explorer 6.0 OVCtl Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19079/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
Microsoft Internet Explorer 6.0 - Local File Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim...
Microsoft Internet Explorer CGenericElement Object Use-After-Free Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Internet Explorer 6.0 String To Binary Function Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19102/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Remote attackers can exploit this issue to crash the...
Microsoft Internet Explorer CInput Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Internet Explorer ControlTracker Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...