CVE-2007-0218

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function...

Memory corruption

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function...

CVE-2007-1750

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style Sheets CSS tag that triggers memory corruption...

CVE-2007-2222

Multiple buffer overflows in the 1 ActiveListen Xlisten.dll and 2 ActiveVoice Xvoice.dll speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the...

CVE-2007-1751

Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka "Uninitialized Memory Corruption Vulnerability."...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...

CVE-2007-1751: Use of Uninitialized Resource

Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka "Uninitialized Memory Corruption Vulnerability."...

Microsoft Internet Explorer CSS Tag Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologi...

Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya...

CVE-2007-0218: Improper Control of Generation of Code

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function...

CVE-2007-2222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the 1 ActiveListen Xlisten.dll and 2 ActiveVoice Xvoice.dll speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the...

Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The flaw is specifically exposed when a prototype variable points to...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in routines responsible for the on-demand...

Microsoft Internet Explorer Prototype Variable Uninitialized Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability when accessing objects that are improperly instantiated or deleted. An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage. Successfully exploiting this issue allows...

Microsoft Internet Explorer Speech API 4 COM Object Instantiation Buffer Overflow Vulnerabilities

Description Microsoft Internet Explorer is prone to multiple buffer-overflow vulnerabilities when instantiating certain COM objects. An attacker may exploit these issues by enticing victims into opening a maliciously crafted webpage. Successfully exploiting these issues allows remote attackers to...

CVE-2007-3027: Undefined Security Weakness

Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...

CVE-2007-1750: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style Sheets CSS tag that triggers memory corruption...

SOL7529 - Stack-based buffer overflow vulnerability in ActiveX control

FirePass 5.5 is not affected, but the following hotfixes for version 5.5 are affected: HF-59313-57605-55025-61183-61531-61155-1 HF-59313-57605-55025-61183-61531-61155-55266-1 HF-59313-57605-55025-61183-61531-61155-55266-63623-1 HF-59313-57605-55025-61183-61531-61155-55266-63623-2 FirePass 5.5.1 i...

CVE-2007-3164

Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if t...

IE 6/Microsoft Html Popup Window (mshtml.dll) DoS

IE 6/Microsoft Html Popup Window mshtml.dll DoS Affected Software : MS Internet Explorer 6.x Overview: ----------------- An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer version 6.x . PoC HTML ------------------ !-- IE 6 / Microsoft Html Popup Window...