Internet Explorer CSS Strings Parsing Memory Corruption (MS07-045; CVE-2007-0943)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The application is also capable of using Cascading Style Sheets CSS. A remote code execution...

Internet Explorer OnBeforeUnload JavaScript Address Bar Spoofing (MS07-057; CVE-2007-3826)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. An address bar spoofing vulnerability...

Design/Logic Flaw

Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document...

Microsoft Internet Explorer CSS Import Use-After-Free Code Execution (MS11-003; CVE-2004-0842; CVE-2010-3971)

Microsoft Internet Explorer is a popular web browser provided by Microsoft Corporation. Its web engine is also incorporated into other Microsoft products including Outlook. The product supports Cascading Style Sheets. A vulnerability exists in the way Microsoft Internet Explorer renders web pages...

Microsoft Internet Explorer MHTML URI Buffer Overflow (CVE-2006-2766)

There exists a buffer overflow vulnerability in the Microsoft Internet Explorer product. The flaw is caused by an improper check of the MHTML URI string. An attacker may exploit this vulnerability to cause a denial of service condition. A code execution attack is not possible as a stack integrity...

Internet Explorer Response Redirect Information Disclosure (CVE-2010-0255)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer that fails to prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access...

Microsoft Internet Explorer Information Disclosure Vulnerability (980088)

Internet Explorer is prone to an information disclosure vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902191. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

CVE-2010-0255

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2010-0555

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content...

Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content...

Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2010-0555

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content...

CVE-2010-0255

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

Microsoft Internet Explorer information leak

It's possible to retrieve any file from client computer via URLMON and Dynamic OBJECT tag...

Microsoft Internet Explorer未明信息泄漏漏洞

Bugraq ID: 37950 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在一个未明的安全漏洞，允许攻击者读取目标用户系统上的任意文件内容。 攻击者必须构建恶意URL，诱使用户点击解析来触发此漏洞。 Microsoft Internet Explorer 5.0.1 SP4 Microsoft Internet Explorer 5.0.1 SP3 Microsoft Internet Explorer 5.0.1 SP2 Microsoft Internet Explorer 5.0.1...

Microsoft Internet Explorer 6 / 7 Local Crash

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html document.createElement"html".outerHTML Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts: infoatsecuritylab.ir &...

MS Internet Explorer 6/7 - Local crash

Exploit for unknown platform in category local exploits ====================================== MS Internet Explorer 6/7 - Local crash ====================================== Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium...

Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...

Input validation

The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a...

Memory corruption

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a...