Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow

v: behavior: urlVMLRender; var heapSprayToAddress = 0x05050505; var payLoadCode =...

US-CERT Vulnerability Note VU#416092

Vulnerability Note VU416092 Microsoft Internet Explorer VML stack buffer overflow Overview Microsoft Internet Explorer IE fails to properly handle Vector Markup Language tags. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. I...

[Full-disclosure] [SECURITY] Sunbelt Software: New Microsoft Internet Explorer Expolit - 9-18-2006

Sunbelt Software Security Advisory Description: A new Microsoft Internet Explorer exploit has been found in the wild by Sunbelt Software Security Researchers. This exploit uses a buffer overflow in the IE's VML code to execute code remotely. Contact [email protected] for further...

CVE-2006-4888: Undefined Security Weakness

Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service application hang via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT...

Multiple Microsoft Internet Explorer security vulnerabilities

Crossite scripting, crossite information access, FTP commands injection. Vulnerabilities can be used for hidden malware installation...

CVE-2006-3873

CVE-2006-3873 describes a heap-based buffer overflow in URLMON.DLL of Microsoft Internet Explorer 6 SP1 on Windows 2000/XP SP1, exploitable via a long URL in a GZIP-compressed HTTP-redirected web page. The issue is tied to an incomplete fix for CVE-2006-3869 and is mitigated by applying the MS06-...

Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Variant Vulnerability

Description Microsoft Internet Explorer is prone to a remote buffer-overflow vulnerability. A successful exploit may result in arbitrary code-execution in the context of the user running the browser. This issue was introduced with the rereleased patches of Microsoft advisory MS06-042. This issue ...

Update Protection against Microsoft Internet Explorer Help Control (HHCtrl) Vulnerability

Microsoft Internet Explorer IE contains a heap overflow vulnerability. The vulnerability exists in a Microsoft ActiveX which supports all functions of the user help interface hhctrl.ocx. A remote attacker may trigger this flaw to deny service from legitimate users. By convincing a user to visit a...

CVE-2006-3873: Undefined Security Weakness

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL in a GZIP-encoded website that was the...

CVE-2006-4627

System Information ActiveX control msinfo.dll, when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service crash via a SaveFile function with a long 1 computer and possibly 2 filename and 3 category argument...

CVE-2006-4627

System Information ActiveX control msinfo.dll, when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service crash via a SaveFile function with a long 1 computer and possibly 2 filename and 3 category argument...

CVE-2006-4627: Undefined Security Weakness

System Information ActiveX control msinfo.dll, when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service crash via a SaveFile function with a long 1 computer and possibly 2 filename and 3 category argument...

CVE-2006-4495

Microsoft Internet Explorer allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including 1 ciodm.dll, 2 myinfo.dll, 3 msdxm.ocx, and 4 creator.dll...

CVE-2006-4495: Undefined Security Weakness

Microsoft Internet Explorer allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including 1 ciodm.dll, 2 myinfo.dll, 3 msdxm.ocx, and 4 creator.dll...

CVE-2006-4446

Heap-based buffer overflow in DirectAnimation.PathControl COM object daxctle.ocx in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points...

CVE-2003-1305

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

CVE-2006-4446: Undefined Security Weakness

Heap-based buffer overflow in DirectAnimation.PathControl COM object daxctle.ocx in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points...

CVE-2003-1305: Undefined Security Weakness

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

CVE-2005-4810: Undefined Security Weakness

Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service crash via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest AJAX...

Microsoft Internet Explorer 5.0.1 - Daxctle.OCX Spline Method Heap Buffer Overflow

Microsoft Internet Explorer 5.0.1 - Daxctle.OCX Spline Method Heap Buffer Overflow source: https://www.securityfocus.com/bid/19738/info Microsoft Internet Explorer is prone to a heap buffer-overflow vulnerability.. The vulnerability arises because of the way Internet Explorer tries to instantiate...