CVE-2007-4848

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a 1 .exe or 2 .dll file...

CVE-2007-4848

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a 1 .exe or 2 .dll file...

CVE-2007-4848: Undefined Security Weakness

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a 1 .exe or 2 .dll file...

CVE-2007-4478

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with...

CVE-2007-4478

CVE-2007-4478 affects Microsoft Internet Explorer 6.0 and 7. An XSS vulnerability occurs when a user saves a page to a local file; the URI string and the document’s content can lead to execution of arbitrary script in the local zone. Connected sources describe saving a URL containing a crafted UR...

CVE-2007-4478: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with...

Microsoft Internet Explorer multiple security vulnerabilities

Memory corruption on ActiveX parsing, unsafe Visual Basic ActiveX execution, Visual Basic ActiveX memory corruption...

Microsoft IE pdwizard.ocx ActiveX控件远程代码执行漏洞（MS07-045）

BUGTRAQ ID: 25295 CVECAN ID: CVE-2007-3041 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的pdwizard.ocx控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 pdwizard.ocx控件中存在内存破坏漏洞，如果用户受骗使用IE访问了恶意站点的话就可能导致执行任意代码。成功利用此漏洞的攻击者可以获得与本地用户相同的用户权限，那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Internet Explorer 7.0 Microsoft Intern...

Microsoft IE tblinf32.dll ActiveX控件远程代码执行漏洞（MS07-045）

BUGTRAQ ID: 25289 CVECAN ID: CVE-2007-2216 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的tblinf32.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 IE中tblinf32.dll或vstlbinf.dll ActiveX控件没有正确地实现IObjectsafety，如果用户受骗访问了恶意站点的话就可能导致执行任意指令。成功利用此漏洞的攻击者可以获得与本地用户相同的用户权限，那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft...

NSFOCUS SA2007-01 : Microsoft IE5 CSS Parsing Memory Corruption Vulnerability

NSFOCUS Security Advisory SA2007-01 Microsoft IE5 CSS Parsing Memory Corruption Vulnerability Release Date: 2007-08-15 CVE ID: CVE-2007-0943 http://www.nsfocus.com/english/homepage/research/0701.htm Affected systems & software =================== Internet Explorer 5.01 Unaffected systems & softwa...

CVE-2007-4356: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a 1 .htm, 2 .html, or 3 .mht file...

Microsoft Internet Explorer Vector Markup Language VGX.DLL Remote Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. This issue occurs when rendering VML Vector Markup Language graphics. Attackers can leverage this issue to execute arbitrary code in the...

Microsoft Internet Explorer CSS Strings Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits may allow an...

Microsoft Internet Explorer substringData Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Microsoft software User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the substringData method available ...

Microsoft Internet Explorer Position:Relative拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer不正确处理部分HTML代码，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建类似如下的恶意页面，诱使用户访问： styleposition:relative/styletableinput/table 可导致应用程序崩溃。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix...

Microsoft DXMedia SDK 6 - 'SourceUrl' ActiveX Remote Code Execution

Tested on:.. - Microsoft DirectX Media 6.0 SDK - Microsoft Internet Explorer 6 + all patches - Microsoft Windows XP SP2 Polish + all patches Details:.. obj.SourceUrl = "AAAA..1044..AAAA"; location.reload; Module DXTLIPI EAX 41414141 CALL DWORD PTR DS:EAX -- var shellcode = unescape"%u9090%u9090"+...

Microsoft Internet Explorer 6 - Position:Relative Denial of Service

source: https://www.securityfocus.com/bid/25222/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle certain HTML code. This issue is triggered when a remote attacker entices a victim user to visit a malicious website. Attackers ma...

Cross site scripting

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...

CVE-2007-3954

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...

CVE-2007-3954

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are...