CVE-2008-1544

CVE-2008-1544 relates to Internet Explorer (IE) 5.01/6/7 where setRequestHeader can bypass header-safety checks, enabling HTTP request splitting/smuggling, host/Referer manipulation, and potential same-origin policy bypass. Microsoft’s connected documentation confirms a fix via MS08-031 (Cumulati...

CVE-2008-1545

In this CVE, the affected component is the XMLHttpRequest.setRequestHeader implementation in Microsoft Internet Explorer 7. The issue arises because the method does not restrict the dangerous Transfer-Encoding HTTP header, enabling remote attackers to perform HTTP request splitting and HTTP reque...

CVE-2008-1368

CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF %0D%0A before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established...

CVE-2008-1368

CVE-2008-1368 describes a CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6. A remote attacker can supply an ftp:// URL containing a URL-encoded CRLF (%0D%0A) before the FTP command, causing the command to be injected into an authenticated FTP session established in the same bro...

CVE-2008-1368

CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF %0D%0A before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established...

iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. For more information about Internet Explorer,...

Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."...

Memory corruption

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...

CVE-2008-0076

Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

CVE-2008-0077

Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption...

Microsoft Internet Explorer Argument Handling Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying...

Microsoft Internet Explorer Property Method Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying...

Microsoft Internet Explorer HTML Rendering Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...

Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution

Tested on:.. - Comodo AntiVirus Beta 2.0 - Microsoft Internet Explorer 6 Just for fun ; -- obj.ExecuteStr'cmd.exe', '/C echo "hello world" && pause'; milw0rm.com 2008-01-23...

Microsoft IE StructuredGraphicsControl远程拒绝服务漏洞

BUGTRAQ ID: 18855 Microsoft IE是微软发布的非常流行的WEB浏览器。 Microsoft IE在处理ActiveX对象时存在漏洞，远程攻击者可能利用此漏洞导致用户的IE崩溃。 IE在调用URLOpenBlockingStream处理ActiveX控件时，ppStream参数会触发空指针应用，如果用户受骗访问了恶意的WEB页面的话就会导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 厂商补丁...

Microsoft IE navcancl.htm跨站脚本执行漏洞（MS07-033）

BUGTRAQ ID: 22966 CVECAN ID: CVE-2007-1499 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理页面导航的操作上存在漏洞，远程攻击者可能利用此漏洞实现跨站脚本执行。 如果由于某种原因取消了到特定页面的导航的话，IE 7浏览器会使用navcancl.htm本地资源，在取消导航时特定页面的URL在“”符号后提供给了navcancl.htm，如res://ieframe.dll/navcancl.htmhttp://www.site.com...

Microsoft IE已删除帧对象访问拒绝服务漏洞

BUGTRAQ ID: 19228 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理对象引用时存在拒绝服务漏洞，远程攻击者可能利用此漏洞拒绝浏览器崩溃。 如果用户受骗访问了已删除帧中的对象属性的话，就会触发空指针引用，导致IE崩溃。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Internet Explorer cloneNode()和nodeValue()远程内存破坏漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理"cloneNode"和"nodeValue"函数存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 由于不正确使用"cloneNode"和"nodeValue" JavaScript函数，在重复的调用其中某个函数过程中使用特定构建的元素，可导致内存破坏，可能以应用程序进程权限执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...

Microsoft Internet Explorer元素标签内存破坏漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分文档对象存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理那些被建立，修改，删除后的文档对象然后通过JavaScript访问，通过存储到文档节点的引用，然后通过分离引用删除它们，内存中的文档模型会变的不稳定。当处于这个不稳定状态时访问标签属性可导致堆破坏，可能导致任意代码执行 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...