CVE-2006-4687

CVE-2006-4687 describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.01–6) triggered by crafted HTML layout using DIV tags and CSS float properties, causing memory corruption. Several connected sources (ZDI-06-041, CERT/NVD, and the MS06-067 bulletin) corrobora...

Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper parsing of HTML CS...

CVE-2006-4687: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."...

Microsoft Internet Explorer HTML Rendering Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser renders HTML with certain layout combinations. An attacker could exploit this issue to execute arbitrary code in the context of the affected browser. This...

CVE-2006-5884: Undefined Security Weakness

Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly related to 1 Danim.dll and 2 Lmrt.dll, a different set of vulnerabilities than CVE-2006-4446 and CVE-2006-4777...

Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (2)

var heapSprayToAddress = 0x05050505; var payLoadCode =...

CVE-2006-5805: Undefined Security Weakness

Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to repo...

Microsoft Internet Explorer 67 - XML Core Services Remote Code Execution (1)

Microsoft Internet Explorer 67 - XML Core Services Remote Code Execution 1 var obj = null; function exploit obj = document.getElementById'target'.object; try obj.opennew Array,new Array,new Array,new Array,new Array; catche ; sh = unescape "%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090" ...

Microsoft IE ADODB.Recordset NextRecordset拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理带有畸形恶意JavsScript代码的网页时存在漏洞，远程攻击者可能利用此漏洞导致IE崩溃。 如果在网页中使用超长字符串反复的调用NextRecordset方法的话，就会触发SysFreeString函数中的无效内存访问，导致IE拒绝服务。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 来源：H D Moore （[email protected]）...

Microsoft Internet Explorer 7 - MHTML Denial of Service

Microsoft Internet Explorer 7 - MHTML Denial of Service source: https://www.securityfocus.com/bid/20875/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to parse certain malformed HTML content. Successfully exploitin...

Microsoft Internet Explorer 7 - MHTML Denial of Service

source: https://www.securityfocus.com/bid/20875/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to parse certain malformed HTML content. Successfully exploiting this issue will cause the affected application to cras...

Microsoft Internet Explorer 6 - Code Execution (1)

Microsoft Internet Explorer 6 - Code Execution 1 source: https://www.securityfocus.com/bid/20797/info Microsoft Internet Explorer is prone to an unspecified vulnerability that results in arbitrary code execution. Successfully exploiting this issue allows remote attackers to execute arbitrary...

Microsoft Internet Explorer 6 - Code Execution (2)

Microsoft Internet Explorer 6 - Code Execution 2 source: https://www.securityfocus.com/bid/20797/info Microsoft Internet Explorer is prone to an unspecified vulnerability that results in arbitrary code execution. Successfully exploiting this issue allows remote attackers to execute arbitrary...

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service source: https://www.securityfocus.com/bid/20812/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code. Successfully...

Microsoft Internet Explorer 6.0/7.0 - 'RemoveChild' Denial of Service

source: https://www.securityfocus.com/bid/20812/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code. Successfully exploiting this issue will cause the affected application to crash,...

Microsoft Internet Explorer 6 - Code Execution (2)

source: https://www.securityfocus.com/bid/20797/info Microsoft Internet Explorer is prone to an unspecified vulnerability that results in arbitrary code execution. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the vulnerable...

Microsoft Internet Explorer UTF-8解码堆溢出漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在将UTF-8字符翻译为Unicode时错误地计算了内存的大小，堆分配和内存拷贝直接的大小偏差可能导致堆破坏。攻击者可以创建特制的WEB页面，如果用户受骗访问了该页面的话就会导致执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法： 如果正在使用Outlook 2002或之后版本，或Outlook Express...

Microsoft Internet Explorer OBJECT标签内存破坏漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 IE在处理某些异常情况时存在内存破坏漏洞。如果用户受骗访问了恶意的站点的话，IE就会允许对象注册可能无法正确处理某些情况的异常处理器，通过特别序列的嵌套“object” HTML标签触发内存破坏，导致执行任意代码。 这个漏洞是CVE-2006-1992漏洞的一个变种。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法：...

Microsoft Internet Explorer畸形HTML解析拒绝服务漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft IE对畸形请求的处理上存在问题，远程攻击者可能利用此漏洞导致IE浏览器崩溃。 如果诱骗IE访问以下HTML代码的话： appleth4title /titlebase 就会触发空指针引用，导致拒绝服务。 以下是访问破坏时的寄存器值和ASM dump： eax=00000000 ebx=00000000 ecx=00e78d38 edx=00e7a704 esi=0012a268 edi=00000000 eip=7d6d2db4 esp=0012a228 ebp=0012a25...

Microsoft Internet Explorer脚本操作处理器溢出漏洞(MS06-013)

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer的脚本处理器在处理超量的脚本操作时存在问题，远程攻击者可能利用此漏洞导致客户机上的IE崩溃，或执行任意代码。 如果攻击者为某个HTML标签指定了几千个脚本操作处理器（如onLoad，onMouseMove等）的话，则由于编程错误，IE会试图在界外写入内存数组，位置大致是在脚本行为处理器ID乘以4的偏移。...