CVE-2009-3943

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

CVE-2009-3943: Undefined Security Weakness

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

Microsoft Internet Explorer DoS

Unremovable dialog with cycled setHomePage...

Internet Explorer Multiple COM Objects Memory Corruption (MS05-037 MS05-038; CVE-2005-1990; CVE-2005-2087)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technologies. There exists a vulnerability in the way Microsoft Internet Explorer instantiates certain COM objects that ar...

Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...

Microsoft IE事件对象类型双重释放漏洞（MS09-054）

BUGTRAQ ID: 36620 CVECAN ID: CVE-2009-2530 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer特定DOM对象的拷贝构造函数中存在漏洞。在复制的时候，多个引用可能生成任意的分配属性。如果变量/对象超出了范围，就会两次释放这些属性，触发堆破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，就可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft...

Microsoft IE HTML组件处理远程代码执行漏洞（MS09-054）

BUGTRAQ ID: 36621 CVECAN ID: CVE-2009-2529 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在特定情况下处理变量的参数验证的方式中存在漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explor...

Microsoft Internet Explorer 5 6 7 memory corruption PoC

No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two HTTP...

Microsoft Internet Explorer 5,6,7 memory corruption PoC

Exploit for unknown platform in category remote exploits ======================================================= Microsoft Internet Explorer 5,6,7 memory corruption PoC ======================================================= Title: Microsoft Internet Explorer 5,6,7 memory corruption PoC CVE-ID:...

CVE-2009-1547

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-2531

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption...

CVE-2009-1547

CVE-2009-1547 concerns Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7. The issue is a remote code execution vulnerability triggered by a crafted data-stream header causing memory corruption in the browser. Technical details across connected docs show that this affects legacy IE versions an...

CVE-2009-2502

Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office...

CVE-2009-1547

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-2502: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office...

Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)

This host is missing a critical security update according to Microsoft Bulletin MS09-054. OpenVAS Vulnerability Test $Id: secpodms09-054.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Multiple Code Execution Vulnerabilities 974455 Authors: Antu Sanadi Updated to KB976749 - ...

CVE-2009-3126: Undefined Security Weakness

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Offic...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruptions...

PT-2009-4041 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, and 7 Description: The issue allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption. Recommendations: For Microsoft Internet...

CVE-2009-2531: Improper Control of Generation of Code

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption...