Microsoft Internet Explorer HTML Objects Script Errors Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser handles script errors in certain situations. An attacker could exploit this issue to execute arbitrary code in the context of the user running the affected...

Microsoft Internet Explorer Object Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser handles uninitialized or deleted objects. An attacker could exploit this issue to execute arbitrary code in the context of the user running the affected...

Microsoft Internet Explorer HTML Objects Script Errors Variant Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser handles script errors in certain situations. An attacker could exploit this issue to execute arbitrary code in the context of the user running the affected...

Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability

This vulnerability allows attackers to execute arbitrary code on systems with vulnerable installations of Apple's QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The flaw exists within the QuickTime Java extensions QTJava.dll,...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow (2)

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow 2 Sub tryMe '------------------------------------------------------------------ 'PoC2 IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w 'original advisory: http://secunia.com/advisories/23475/ 'author:...

CVE-2007-2291

CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF %0a in the username attribute...

Design/Logic Flaw

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service browser hang via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

CVE-2007-2161

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service browser hang via JavaScript that matches a regular expression against a long string, as demonstrated using /./...

CVE-2007-2161

CVE-2007-2161 affects Microsoft Internet Explorer 7. The vulnerability is triggered by JavaScript that matches a regular expression against a long string (demonstrated with /(.)*/), allowing a remote attacker to cause a denial of service (browser hang). The provided documents do not specify the a...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications that employ the vulnerable controls typically Microsoft Internet Explorer...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications tha...

Microsoft Internet Explorer HTML拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理HTML存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建如下恶意的HTML代码，诱使用户使用IE处理，可导致应用程序崩溃： usr/bin/python print "-------------------------------------------------------------------------" print " Internet Explorer 7.0.5730.11 Denial of Service"...

Microsoft Internet Explorer 7 - HTML Denial of Service

Microsoft Internet Explorer 7 - HTML Denial of Service source: https://www.securityfocus.com/bid/23178/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a...

Microsoft Internet Explorer DoS

Memory exhaustion with appendChild method...

Spoofing

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and...

Microsoft Internet Explorer NavCancel.HTM跨站脚本漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer包含的navcancl.htm存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，可以获得敏感信息。 当特定页面取消时，页面URL会提供给navcancl.htm处理，类似res://ieframe.dll/navcancl.htmhttp://www.site.com，navcancl.htm然后在“Refresh the...

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting source: https://www.securityfocus.com/bid/22966/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit...

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting

source: https://www.securityfocus.com/bid/22966/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to spoof the contents of the Navigation canceled page,...

CVE-2007-1405

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Microsoft Internet Explorer - FTP Server Response Denial of Service (MS07-016)

Microsoft Internet Explorer - FTP Server Response Denial of Service MS07-016 !/usr/bin/perl MS 07-016 FTP Server Response PoC Usage: ./ms07016ftp.pl LISTENIP Tested Against: MSIE 6.02900.2180 SP2 Details: The response is broken into buffers, either at length 1024, or at '\r\n'. Each buffer is...