CVE-2005-2831

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of t...

CVE-2005-2829

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by 1 overlaying a malicious new window above a file download box, then 2 using a keyboard shortcut and delaying the display of the file download box until the user hits a...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection source: https://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983

CVE-2005-3983 describes an unknown vulnerability in the login page of HP Systems Insight Manager (SIM) 4.0 and 4.1 when accessed through Microsoft Internet Explorer with the MS04-025 patch , resulting in a denial of service (browser hang) . The advisory is vague and the connected documents do not...

[Full-disclosure] Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability

Computer Terrorism UK ======================== Security Advisory Reclassification :: CT21-11-2005 ----------------------------------------------------- Title: Microsoft Internet Explorer JavaScript Window Vulnerability Author: S. Pearson Organisation: Computer Terrorism UK Web:...

Microsoft Internet Explorer code execution

Uninitilized memory call on Window function within OnLoad handler of BODY tag allows code execution...

IE VBScript Handling patch (Q318089)

Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files. Impact of vulnerability: Information Disclosure Affected Software: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 See...

Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1)

Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service 1 source: https://www.securityfocus.com/bid/15268/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue arises because the application fails to properly parse certain malformed HTML...

openssl, openssl096b security update

CentOS Errata and Security Advisory CESA-2005:800 Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 a...

Microsoft Internet Explorer COM Object Instantiation Variant Vulnerability

Description Microsoft Internet Explorer is prone to a buffer overflow vulnerability that is related to instantiation of COM objects. Successful exploitation could let remote attackers execute arbitrary code in the context of the currently logged in user on the affected computer. This is a variant...

[SA16775] PunBB Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service

Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service source: https://www.securityfocus.com/bid/14899/info Microsoft Internet Explorer for Mac OS is prone to a denial of service vulnerability. This issue occurs when Internet Explorer attempts to render a Web page with malformed content...

CVE-2004-2476

The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...

CVE-2005-2127

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally...

CVE-2005-2127

CVE-2005-2127 is a remote code-execution vulnerability in Internet Explorer 5.01/5.5/6 related to memory corruption when instantiating certain COM objects not designed for IE. The issue, documented as COM Object Instantiation Memory Corruption, affects multiple CLSIDs (e.g., Msdds.dll, Blnmgrps.d...