CVE-2009-2531: Improper Control of Generation of Code

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption...

CVE-2009-2529: Improper Control of Generation of Code

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability."...

CVE-2009-1547: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."...

CVE-2009-2501: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and...

CVE-2009-2530: Improper Control of Generation of Code

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption...

Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)

This host is missing a critical security update according to Microsoft Bulletin MS09-054. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability

ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-071 October 13, 2009 -- CVE ID: CVE-2009-2531 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7...

CVE-2009-2503: Improper Control of Generation of Code

GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3,...

Internet Explorer HTML Component Handling Remote Code Execution (MS09-054; CVE-2009-2529)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles argument validation of a variant in specific situations. The vulnerability occurs when Internet Explorer validates arguments incorrectly und...

Microsoft Internet Explorer 'Event' Object Copy Constructor Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Microsoft Internet Explorer HTML Component Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Microsoft Internet Explorer 'deflate' HTTP Content Encoding Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Microsoft Internet Explorer 'writing-mode' Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a user must visit a malicious web page. The specific flaw exists in the parsing of CSS style information. When a writing-mode style...

Microsoft Internet Explorer Event Object Type Double-Free Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the copy constructor for a...

Microsoft IE CA SSL Certificate Security Bypass Vulnerability (Oct 2009)

Internet Explorer is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft IE CA SSL Certificate Security Bypass Vulnerability - Oct09

This host is installed with Internet Explorer and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmsiesslcertisecbypassvulnoct09.nasl 6529 2017-07-05 06:05:51Z cfischer $ Microsoft IE CA SSL Certificate Security Bypass Vulnerability - Oct09 Authors: Sharath S Updated...

Sql injection

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3267

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3270: Uncontrolled Resource Consumption

Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service unusable browser by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821...