CVE-2006-1189

Microsoft Internet Explorer suffers a remote code execution vulnerability (CVE-2006-1189) due to a buffer overflow in URLMON.DLL when parsing IDNs in double-byte character sets (DBCS). Affected browsers include IE 5.01 SP4 and IE6 across Windows 98/ME/2000/XP/Server 2003, including IE6 SP1 in var...

Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...

Microsoft Internet Explorer Persistent Window Content Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to address-bar spoofing. Attackers may exploit this via a malicious web page to spoof the contents of a page that the victim may trust. This vulnerability may be useful in phishing or other attacks that rely on content spoofing. Technologies Affect...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

Code injection

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

Microsoft Internet Explorer - 'createTextRang' Remote Code Execution

shellcode = unescape "%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%...

MS Internet Explorer (createTextRang) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits =================================================================== MS Internet Explorer createTextRang Remote Code Execution Exploit =================================================================== !--...

[SA18680] Microsoft Internet Explorer "createTextRange()" Code Execution

TITLE: Microsoft Internet Explorer "createTextRange" Code Execution SECUNIA ADVISORY ID: SA18680 VERIFY ADVISORY: http://secunia.com/advisories/18680/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Microsoft Internet Explorer 6.x http://secunia.com/product/11/...

[Full-disclosure] Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution

Computer Terrorism UK :: Incident Response Centre Security Advisory :: CT22-03-2006 ------------------------------------------- Title: Microsoft Internet Explorer mshtml.dll - Remote Code Execution Organisation: Computer Terrorism UK Web: www.computerterrorism.com Advisory Date: 22nd March, 2006...

Microsoft Internet Explorer 6 - 'mshtml.dll checkbox' Crash

r=document.getElementById"c"; a=r.createTextRange; milw0rm.com 2006-03-22...

Microsoft Internet Explorer 6 - Script Action Handlers 'mshtml.dll' Denial of Service

foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

Microsoft Internet Explorer array index overflow

Array index overflow for large number of HTML tag's events handlers. Vulnerability can be used for hidden malware installation...

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow source: https://www.securityfocus.com/bid/17131/info Microsoft Internet Explorer is susceptible to a remote buffer-overflow vulnerability in 'MSHTML.DLL'. The application fails to properly bounds-check user-supplied input...

Microsoft Internet Explorer 5.0.1 - Script Action Handler Buffer Overflow

source: https://www.securityfocus.com/bid/17131/info Microsoft Internet Explorer is susceptible to a remote buffer-overflow vulnerability in 'MSHTML.DLL'. The application fails to properly bounds-check user-supplied input data before copying it into an insufficiently sized memory buffer. Remote...

Microsoft Internet Explorer IsComponentInstalled buffer overflow

Problem is fixed in Windows 2000 SP4 / Windows XP SP1...

CVE-2006-0799

Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate "href" attribute, a form whose action points to a malicious URL, and an INPUT submit element that is modified to lo...

Microsoft Internet Explorer Drag-and-Drop Redeux

Microsoft Internet Explorer Drag-and-Drop Redeux I. SYNOPSIS Affected Systems: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 - Windows 98 - Windows 98 Second Edition - Windows Millennium Edition - Windows 2000 - Windows XP - Windows Server 2003...

[NT] Microsoft Internet Explorer Drag-and-Drop Redeux

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...