Microsoft IE dxtmsft.dll Multiple ActiveX COM Object DoS

Microsoft Internet Explorer contains a flaw that may allow a remote denial of service. The issue is triggered when a user accesses a malicious web site that contains scripting code calling a number of ActiveX COM objects in the dxtmsft.dll library, and will result in loss of availability for the...

Microsoft Internet Explorer Frame Src拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理Frame src存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交类似如下的页面，诱使用户打开，可导致应用程序崩溃： html frameset rows="1000%" frame src="?" /html Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2...

CVE-2006-6310

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

CVE-2006-6311

CVE-2006-6311 affects Microsoft Internet Explorer 6.0.2900.2180, where a denial-of-service can be triggered by a style attribute in an HTML table tag whose width is computed via JavaScript. The vulnerability description documents a remote DoS impact, but the connected sources do not provide concr...

CVE-2006-6311: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag with a width value that is dynamically calculated using JavaScript...

CVE-2006-6310: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

Microsoft Internet Explorer已删除帧对象拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理已删除帧对象存在问题，远程攻击者可以利用漏洞可对应用程序进行拒绝服务攻击。 构建包含恶意已删除帧对象的WEB页，诱使用户访问，可导致用户的IE浏览器崩溃，造成拒绝服务攻击。可能存在任意代码执行可能。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft...

Microsoft Internet Explorer 7 - CSS Width Element Denial of Service

source: https://www.securityfocus.com/bid/21466/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit a malicious website. Remote...

Microsoft Internet Explorer 6 - Frame Src Denial of Service

Microsoft Internet Explorer 6 - Frame Src Denial of Service source: https://www.securityfocus.com/bid/21447/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entic...

Microsoft Internet Explorer array index overflow

Index array overflow on large number of e.g. "OnClick" HTML tag event handlers...

Microsoft Internet Explorer 6 - Frame Src Denial of Service

source: https://www.securityfocus.com/bid/21447/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit a malicious website. Remote...

Microsoft IE HTML渲染内存破坏漏洞（MS06-067）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer在解析HTML CSS的float属性时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果处理了HTML页面中的特制div标签的话，就会触发内存破坏，导致执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 将Internet和本地Intranet安全区域设置设为“高”，以便在这些区域中运行ActiveX控件和活动脚本之前进行提示。 将Internet...

Microsoft IE daxctle.ocx KeyFrame方法堆溢出漏洞（MS06-067）

Internet Explorer是一款微软开发的非常流行的WEB浏览器。 Microsoft IE的daxctle.ocx ActiveX控件实现上存在堆溢出漏洞，远程攻击者可能利用此漏洞在在用户机器上执行任意指令。 Multimedia Controls ActiveX控件（daxctle.ocx）的CPathCtl::KeyFrame函数存在溢出漏洞。如果HTML文档处理对ActiveX控件的KeyFrame方式所传送的特制参数，则用户受骗访问了这样的恶意HTML文档就会导致执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft...

Microsoft IE COM对象实例化daxctle.ocx堆破坏漏洞（MS06-067）

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理某些COM对象的畸形参数时存在堆破坏漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当Internet Explorer在处理DirectAnimation.PathControl COM对象（daxctle.ocx）的Spline方式时，如果将第一个参数设置为0xffffffff的话就会触发堆溢出漏洞，导致拒绝服务或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

CVE-2006-5913

Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...

CVE-2006-5913: Undefined Security Weakness

Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...

[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...

Microsoft Internet Explorer fails to properly interpret HTML with certain layout combinations

Overview A vulnerability in the way Microsoft Internet Explorer interprets malformed Web pages may lead to execution of arbitrary code. Description Microsoft Internet Explorer contatins a vulnerabilty that could be exploited when Internet Explorer attempts to interpret specially crafted Web pages...

CVE-2006-5884

Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly related to 1 Danim.dll and 2 Lmrt.dll, a different set of vulnerabilities than CVE-2006-4446 and CVE-2006-4777...

CVE-2006-4687

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."...