CVE-2003-1505: Undefined Security Weakness

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service crash by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved...

CVE-2003-1484: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service crash by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute...

IE和Firefox浏览器Digest认证请求拆分漏洞

BUGTRAQ ID: 23668 CVECAN ID: CVE-2007-2292 IE和Firefox都是流行的WEB浏览器。 IE和Firefox在处理Digest认证方式时存在漏洞，可能导致验证失败。 如果用户使用Digest认证通过HTTP请求登录到网站的话，Firefox和IE可能无法正确地验证用户ID。恶意的网页可能在用户ID中包含有换行字符（%0a）注入头数据，如果用户通过代理进行连接的话代理就可能将认证请求解释为两个独立的请求，导致注入任意HTTP头。 Microsoft Internet Explorer 7.0.5730.11 Mozilla Thunderbird...

Microsoft Internet Explorer扩展过滤器绕过任意文件下载漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer不正确处理用户输入，远程攻击者可以利用漏洞下载任意文件，但不能执行。 由于扩展过滤器处理扩展文件存在问题，构建恶意扩展，并诱使用户访问，可导致任意文件被下载，但根据调查，此下载文件会提示非法格式错误而不能执行。 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

CVE-2007-5456: Improper Control of Generation of Code

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

Microsoft Internet Explorer multiple security vulnerabilities

Memory corruption, address bar spoofing...

Code injection

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...

Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error...

CVE-2007-3893

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error...

CVE-2007-3893

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error...

CVE-2007-3893: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error...

CVE-2007-3892: Improper Control of Generation of Code

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...

CVE-2007-5277

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a differen...

Microsoft Windows URI处理器命令执行漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Windows不正确处理URI中指定的协议，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 URI是用于识别位置，资源或协议的字符串，Microsoft Windows会通过注册的协议处理器来解析URI判断相关的应用程序。多种Windows应用程序类型如WEB浏览器和EMAIL客户端依靠Microsoft Windows来判断适当的应用程序来处理一个特定的URI。 Internet Explorer 7更改了Microsoft...

CVE-2007-5277: Undefined Security Weakness

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a differen...

CVE-2007-5158: Undefined Security Weakness

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to...

Microsoft Internet Explorer 5.0.1 - Arbitrary File Upload

Microsoft Internet Explorer 5.0.1 - Arbitrary File Upload source: https://www.securityfocus.com/bid/25836/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability that allows attackers to gain access to the contents of arbitrary files. This issue stems from a design...

Microsoft Internet Explorer 5.0.1 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/25836/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability that allows attackers to gain access to the contents of arbitrary files. This issue stems from a design error resulting from the improper handling of form fields...