CVE-2008-3474: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information...

CVE-2008-3475

CVE-2008-3475 affects Microsoft Internet Explorer 6. The vulnerability arises from improper handling of componentFromPoint on XML objects that are uninitialized or deleted, enabling an attacker to execute arbitrary code via a crafted HTML page. Impact includes remote code execution with the attac...

CVE-2008-3473: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...

CVE-2008-3475: Use of Uninitialized Resource

Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been 1 incorrectly initialized or 2 deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory...

CVE-2008-3476

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Objects Memory Corruption Vulnerability."...

[Full-disclosure] ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability

ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-069 -- CVE ID: CVE-2008-3475 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 -- TippingPointTM IPS Customer Protection:...

Microsoft Internet Explorer HTML Element Cross Domain Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow...

Internet Explorer Cross-Domain Information Disclosure (MS08-058; CVE-2008-3474)

Microsoft Internet Explorer is the most widely used Internet browser. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to correctly interpret the origin of scripts. An attacker can trigge...

PT-2008-4870 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6 Description: The issue arises from improper error handling when using the componentFromPoint method on xml objects that have been incorrectly initialized or deleted, allowing remote attackers to execute...

Microsoft Internet Explorer Uninitialized Object Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...

Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...

CVE-2008-4381

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service application crash via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters...

CVE-2008-4381: Undefined Security Weakness

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service application crash via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters...

Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)

ef: behavior: urldefaultVML; ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers Link:...

Microsoft Internet Explorer Denial of Service Vulnerability

The host has Microsoft Internet Explorer installed, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiexplorerdosvuln900131.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft Internet Explorer Denial of Service Vulnerability Authors: Sharath S...

Microsoft Internet Explorer DoS Vulnerability (CVE-2008-4127)

Microsoft Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpmyadmin -- Cross-Site Scripting Vulnerability

Secunia reports: An error exists in the "PMAescapeJsString" function in libraries/jsescape.lib.php, which can be exploited to bypass certain filters and execute arbitrary HTML and script code in a user's browser session in context of an affected site when e.g. Microsoft Internet Explorer is used...

XSS for Microsoft Internet Explorer on several places

PMASA-2008-8 Announcement-ID: PMASA-2008-8 Date: 2008-09-23 Updated: 2008-10-01 Summary XSS for Microsoft Internet Explorer on several places Description We received an advisory from Masako Oono of NetAgent Co.,Ltd. via JPCERT/CC Vulnerability Handling Team and we wish to thank them for their wor...

Mozilla Firefox / Opera / Microsoft Internet Explorer browsers DoS

window.sidebar.addPanel in the loop causes browser to hang...

Microsoft Internet Explorer DoS in Rendering Malicious PNG Files.

Microsoft Internet Explorer DoS in Rendering Malicious PNG Files. Version Affected: IE 7 / IE 8 BETA Severity: Intermediate Background: Mshtml.dll is a standard library which is responsible for rendering objects in web pages in Internet Explorer. Description: The Internet Explorer 7 is vulnerable...