[Full-Disclosure] Secunia Research: Microsoft Internet Explorer "createControlRange()" Memory Corruption

====================================================================== Secunia Research 09/02/2005 Microsoft Internet Explorer "createControlRange" Memory Corruption ====================================================================== Table of Contents Affected...

[Full-Disclosure] Secunia Research: Microsoft Internet Explorer Multiple Vulnerabilities

====================================================================== Secunia Research 09/02/2005 - Microsoft Internet Explorer Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

Microsoft Internet Explorer Unspecified ActiveX Image Control Vulnerability

Description Microsoft has announced in the MS05-014 Cumulative Internet Explorer bulletin that the ActiveX Image Control 1.0 is no longer supported due to an unspecified security vulnerability. The cumulative update addresses the vulnerability by setting the kill-bit on the control so that it may...

Microsoft Internet Explorer URI Decoding Vulnerability

Description Microsoft Internet Explorer is prone to a vulnerability related to URI decoding. A bug in how the browser parses encoded URI data may allow zone bypass. As a result, it is possible to force the browser to interpret Web content in the Local Zone. This could be exploited to execute...

Microsoft Internet Explorer contains URL decoding cross-domain vulnerability

Overview A URL decoding vulnerability in Microsoft Internet Explorer may allow remote attackers to bypass zone security restrictions and execute arbitrary code on affected systems. Description IE uses a cross-domain security model to maintain separation between browser frames from different...

Microsoft Internet Explorer DHTML Method Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a heap-based buffer-overflow vulnerability caused by a boundary condition error that is exposed when passing data to the 'createControlRange' DHTML method. As a result, heap-based memory can be corrupted with attacker-supplied data. An attacker...

Microsoft Internet Explorer - '.ANI' Downloader (MS05-002)

/ Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit...

Microsoft Internet Explorer - .ANI Downloader (MS05-002)

Microsoft Internet Explorer - .ANI Downloader MS05-002 / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002...

Microsoft Internet Explorer - .ANI Universal (MS05-002)

Microsoft Internet Explorer - .ANI Universal MS05-002 / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

Exploit for unknown platform in category remote exploits ===================================================================== MS Internet Explorer .ANI files handling Universal Exploit MS05-002 ===================================================================== / Added string.h /str0ke / /...

[SA13918] Sun Java Plug-In Two Vulnerabilities

TITLE: Sun Java Plug-In Two Vulnerabilities SECUNIA ADVISORY ID: SA13918 VERIFY ADVISORY: http://secunia.com/advisories/13918/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...

Microsoft Internet Explorer - '.ANI' Universal (MS05-002)

/ Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected systems...

Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)

NGSSoftware Insight Security Research Advisory Name: Microsoft Internet Explorer Install Engine Control Buffer Overflow Systems Affected: Microsoft Internet Explorer 5.x/6.x Severity: High Vendor URL: http://www.microsoft.com/ Author: Peter Winter-Smith [email protected] Date of Public...

CVE-2004-1376

Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. dot dot sequences in filenames returned from a LIST command...

Microsoft Internet Explorer - '.ANI' Remote Stack Overflow (MS05-002) (2)

Credit for the vulnerability: Yuji Ukai for eEye Digital Security Patch: http://www.microsoft.com/technet/security/bulletin/MS05-002.mspx Changelog for 3.2: - Putting the .ANI file in the HEAD sometimes caused the BoF to trigger before the heap was prepared, fixed that by putting it in the BODY. ...

Microsoft Internet Explorer directory traversal

.. in filename is not checked...

CVE-2004-2307

Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service browser crash via a shell: URI with double backslashes \ in an HTML tag such as IFRAME or A...

CVE-2004-1527

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers ...

CVE-2004-2219

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake...

CVE-2004-1166

CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline "%0a" before the FTP command, which causes the commands to be inserted into the resulting FTP...