CVE-2009-3267: Uncontrolled Resource Consumption

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

Microsoft Internet Explorer Address Bar Spoofing Vulnerability

Internet Explorer is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3019: Improper Control of Generation of Code

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service application crash via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value...

CVE-2009-3003

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...

CVE-2009-3003: Undefined Security Weakness

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...

Microsoft Internet Explorer 'location.hash' DOS Vulnerability

This host is installed with Internet Explorer and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsielocationhashdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'location.hash' DOS Vulnerability Authors: Sharath S Copyright:...

Microsoft Internet Explorer 'location.hash' DOS Vulnerability

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2954

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service CPU consumption and application hang via JavaScript code with a long string value for the hash property aka location.hash, a related issue to CVE-2008-5715...

CVE-2009-2954: Improper Input Validation

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service CPU consumption and application hang via JavaScript code with a long string value for the hash property aka location.hash, a related issue to CVE-2008-5715...

Microsoft Internet Explorer Crash

Irfan Asrar Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1";...

Microsoft Internet Explorer - JavaScript SetAttribute Remote Crash

Irfan Asrar Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1"; milw0rm.com 2009-08-18...

Microsoft IE 8 Shines in Web Browser Security Test

From Network World Ellen Messmer Microsoft’s Internet Explorer 8 rated tops among five browsers tested by NSS Labs for effectiveness in protecting against malware and phishing attacks — though NSS Labs acknowledges Microsoft paid for the tests. Nevertheless, the test process, which lasted over a...

Design/Logic Flaw

Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service application crash via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location...

CVE-2009-2764: Undefined Security Weakness

Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service application crash via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location...

Microsoft Internet Explorer XML Document DoS Vulnerability - Aug09

This host has Internet Explorer installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsiexmldocdosvulnaug09.nasl 6530 2017-07-05 06:23:50Z cfischer $ Microsoft Internet Explorer XML Document DoS Vulnerability - Aug09 Authors: Sharath S Copyright: Copyright ...

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-048 August 5, 2009 -- CVE ID: CVE-2009-1919 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Customer...

ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability

ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-047 August 5, 2009 -- CVE ID: CVE-2009-1918 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Custom...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruptions, workaround for ATL vulnerability added...

Microsoft Internet Explorer 'findText()' Unicode Parsing DoS Vulnerability

Internet Explorer is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer 8拒绝服务漏洞

Bugraq ID: 35941 Microsoft Internet Explore是一款流行的WEB应用程序。 Microsoft Internet Explore处理恶意脚本代码存在问题，远程攻击者可以利用漏洞使应用程序崩溃。 构建恶意WEB页，诱使用户访问可触发此漏洞。 Microsoft Internet Explorer 8 目前没有解决方案提供： http://www.microsoft.com/windows/ie/ !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional"...