CVE-2007-3550: Improper Control of Generation of Code

Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results in a denial of service website suppression and resource consumption, aka "Internet Explorer Zone Domain Specification D...

Microsoft Internet Explorer DoS

Browser DoS on the page in domain with special characters...

Design/Logic Flaw

Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length JavaScript variable...

CVE-2007-3497

Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length JavaScript variable...

CVE-2007-3497: Undefined Security Weakness

Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length JavaScript variable...

Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

CVE-2007-3481

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute. NOTE: this issue...

CVE-2007-3481: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute. NOTE: this issue...

CVE-2007-3406: Undefined Security Weakness

Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitrary local files via the file: URI in the 1 src attribute of a a bgsound, b input, c EMBED, d img, or e script tag; 2 data attribute of an object tag; 3 value...

CVE-2006-7206

CVE-2006-7206 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes a denial-of-service crash caused by creating an ADODB.Recordset object and issuing a sequence of NextRecordset calls with a long string argument, leading to an invalid memory access in SysFreeString. The provided ...

CVE-2006-7206: Undefined Security Weakness

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

CVE-2006-7206

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

CVE-2007-3341

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217...

CVE-2007-3341: Undefined Security Weakness

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217...

Microsoft IE CSS标签内存破坏漏洞（MS07-033）

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理网页中的CSS标签时存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 临时解决方法： 以纯文本格式阅读邮件消息以防范HTML邮件攻击。 厂商补丁： Microsoft ---------...

Microsoft IE URLMON.DLL COM对象实例化无效内存访问漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer在创建某些COM对象时存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 如果调用了IObjectSafety函数的话，可能会访问未初始化的内存，导致执行任意代码。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方...

Microsoft IE语言包安装远程代码执行漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 用于负责按需安装Internet Explorer语言包的例程存在竞争条件错误，成功利用此漏洞的攻击者可以完全控制受影响的系统。 如果网页所包含的一些内容是由所安装语言包不支持的语言编写的话，则用户访问了该网页就可以触发这个漏洞，导致内存破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruptions, content spoofing...

Race condition

Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...

CVE-2007-0218

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function...