4365 matches found
Internet Explorer wininet.dll URL parsing memory corruption details
Vendor: Microsoft Software: Internet Explorer 6.0, 5.5, 5.01 Problem: Memory corruption, code execution Remote: Yes Risk Level: Medium to low hard to exploit Authors: Axle ICQ 755756 bug discovery 3APA3A, http://www.security.nnov.ru/ bug research Original URL:...
CVE-2005-0555
Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."...
CVE-2005-0554
CVE-2005-0554 describes a buffer overflow in Internet Explorer’s URL processing logic when handling long hostnames, affecting IE 5.01, 5.5, and 6.0. Public sources (NVD/NIST, CVE listings, and security advisories) identify this as a URL Parsing Memory Corruption Vulnerability that could allow rem...
CVE-2005-0555
CVE-2005-0555 describes a memory corruption vulnerability in Internet Explorer’s Content Advisor feature. The issue affects IE 5.01, 5.5, and 6 and is triggered by processing crafted Content Advisor files, potentially allowing remote code execution on affected systems. Connected advisories and th...
Microsoft Internet Explorer Malformed URI Buffer Overflow Vulnerability
Description A buffer overflow vulnerability is reported in Microsoft Internet Explorer. This issue is due to insufficient boundary verification of user-supplied input data causing a fixed-sized memory buffer to be overrun when attempting to copy data into it. This vulnerability allows...
Microsoft Internet Explorer - DHTML Object Handling (MS05-020)
Microsoft Internet Explorer - DHTML Object Handling MS05-020 a=document.createTextNode;trywindow.open.document.appendChilda;catchedocument.removeChilda; p=document.createElement;c=window.open.document.createElement;tryc.appendChildp;catchep.removeChildc;;...
Microsoft Internet Explorer Content Advisor File Handling Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code to be processed by the browser. A typical...
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This iss...
Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)
Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow MS05-020 source: https://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit thi...
Microsoft Internet Explorer 5.0.1 - DHTML Object Race Condition Memory Corruption
source: https://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script...
Microsoft Internet Explorer - DHTML Object Handling (MS05-020)
a=document.createTextNode;trywindow.open.document.appendChilda;catchedocument.removeChilda; p=document.createElement;c=window.open.document.createElement;tryc.appendChildp;catchep.removeChildc;; trywindow.open.document.appendChilddocument;catche...
Microsoft Internet Explorer DHTML Object Race Condition Memory Corruption Vulnerability
Description A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application attempts to process certain script objects, a race condition may lead to the...
MS Internet Explorer DHTML Object Handling Vulns (MS05-020)
Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer DHTML Object Handling Vulns MS05-020 ===========================================================...
Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)
source: https://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code t...
Multiple Microsoft Internet Explorer browser security vulnerabilities
Drag-n-Drop vulnerability, URL Decoding Zone Spoofing Vulnerability, DHTML Method Heap Memory Corruption Vulnerability, Channel Definition Format CDF Cross Domain Vulnerability. This vulnerability can potentially be used for silent spyware or adware installation...
Microsoft Internet Explorer - 'mshtml.dll' CSS Parsing Buffer Overflow
/ Taken from http://www.securiteam.com/exploits/5NP042KF5A.html The exploit will create a .CSS file that should be included in an HTML file. When a user loads the HTML file, Internet Explorer will try to parse the CSS and will trigger the buffer overflow. / //Exploit Code: include include include...
CVE-2004-1527
Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers ...
Opera 7.x/Firefox 1.0/Internet Explorer 6.0 - Information Disclosure
source: https://www.securityfocus.com/bid/12723/info Multiple browsers are reported prone to an information disclosure weakness. This issue can allow an attacker to determine information such as the location of files, file names and user names on a vulnerable computer. Information gathered throug...
Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation
Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be...
Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation
source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false information in the status bar or U...